S.L. 586.8 ст. 57Administrative fines.

The Commissioner may impose an administrative fine of not less than five hundred euro (€500) and not more than fifty thousand euro (€50,000), pursuant to regulation 56, for violating any of the following:

(a) the obligations of the controller and the processor pursuant to regulation 19 to 34;

(b) the obligation to produce a data retention policy and any subsequent amendments pursuant to regulation 5;

(c) the basic principles for processing, pursuant to regulation 4, 8 and 10;

(d) the data subjects’ rights pursuant to regulation 12 to 18;

(e) the transfers of communication and transfers of personal data pursuant to regulation 35 to 46:

Provided that the Commissioner may impose a daily fine of not more than fifty euro (€50) until the breach is rectified.