All over again, Understand that these aren’t “fines” in exactly the same sense that, say, you’d purchase violating some government regulation or targeted traffic regulation; they’re penalties built into a contract among retailers, payment processors, and card makes. The information security authorities, Functioning together in the European Information Protection Board, https://www.nathanlabsadvisory.com/eu-gdpr.html