question
"most extreme cases of breaches of the regulation, organisations can be fined €20m or up to 4 per cent of the total worldwide annual turnover of the preceding financial year,"
SImple question - does it apply to both government and to government-authorised cartels such as credit ref agencies. If for example, if a reference agency shares anything with an organisation where you have not given explicit consent for that specific information to be shared, will they face the fines? If a civil servant leaves the USB drive on the train, does the government face the fine, or the individual in question?