# Data Protection Act 2018, Paragraph 16: GDPR: maximum amount of penalties


In relation to an infringement, before IP completion day, of a provision of the EU GDPR (as it was directly applicable to the United Kingdom) or the applied GDPR—
(a) Article 83(5) and (6) of the UK GDPR and section 157(5)(a) and (b) of this Act have effect as if for “£17,500,000” there were substituted “ 20 million Euros ”;
(b) Article 83(4) of the UK GDPR and section 157(6)(a) and (b) of this Act have effect as if for “£8,700,000” there were substituted “ 10 million Euros ”;
(c) the maximum amount of a penalty in sterling must be determined by applying the spot rate of exchange set by the Bank of England on the day on which the penalty notice is given under section 155 of this Act.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/21/paragraph/16 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-21/paragraph-16
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.