Ms Helen Dixon:

In fact, under the GDPR the fines that are set down, which can be up to 4% of turnover for the previous year for an undertaking or €20 million, apply only to private sector organisations, and member states were left with a choice in their national law in relation to public sector bodies. What has been provided for in the 2018 Act in Ireland is that there can be a fine of up to €1 million in respect of public sector bodies.