[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFcvN2I1EMXdbjoKKHCWJm1MUXkl-EiU8u73gC1KLf1M":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":29},"124a0804-a7e6-44a6-b016-a4c17e0d32f3","Amendes RGPD et interaction avec le règlement sur les services numériques : retour sur la plénière du CEPD du 17 septembre 2026","amendes-rgpd-et-interaction-avec-le-reglement-sur-les-services-numeriques-retour-9ee9f2","Le 17 septembre 2026, le CEPD a adopté des lignes directrices sur le pouvoir des autorités de protection des données d’infliger des amendes administratives et la version finale de ses lignes directrices sur l'interaction entre le règlement sur les services numériques (DSA) et le RGPD.","The European Data Protection Board (EDPB) has adopted new guidelines concerning the administrative fine powers of Data Protection Authorities (DPAs) and the interaction between the Digital Services Act (DSA) and the GDPR. The guidelines outline a five-step process for DPAs to determine and impose administrative fines, considering intent, negligence, aggravating, and mitigating circumstances. They also clarify corrective measures available to DPAs and provide practical examples. The final guidelines on the DSA-GDPR interaction aim to ensure consistent application of both regulations, particularly for intermediary service providers processing personal data.","CEPD adopts guidelines on administrative fines and interaction between DSA and GDPR.","https:\u002F\u002Fwww.cnil.fr\u002Ffr\u002Fpleniere-cepd-amendes-reglement-services-numeriques",null,"2026-09-23T12:00:00+00:00","2026-09-23T14:00:43.594357+00:00",7,[17,20,22],{"name":18,"type":19},"DSA","product",{"name":21,"type":19},"RGPD",{"name":23,"type":24},"CEPD","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":25,"icon":12,"name":27,"slug":28},"Policy","policy",[30,35,40,45],{"category":31},{"id":32,"icon":12,"name":33,"slug":34},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":36},{"id":37,"icon":12,"name":38,"slug":39},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":41},{"id":42,"icon":12,"name":43,"slug":44},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":46},{"id":25,"icon":12,"name":27,"slug":28},[],[23,18,21],{"controls":50,"vendors":51},[],[],{"slug":53,"title":54,"body":55,"framework_refs":56,"framework_notes":67},"edpb-issues-new-gdpr-fine-guidelines-and-dsa-gdpr-interaction-rules","EDPB Issues New GDPR Fine Guidelines and DSA-GDPR Interaction Rules","The European Data Protection Board has formalized a five-step methodology for Data Protection Authorities to calculate and impose administrative fines under the GDPR, incorporating intent, negligence, and aggravating or mitigating factors. This matters because organizations operating across the EU must now anticipate a more structured and consistent enforcement approach, leaving less room for ambiguity when regulators assess violations. The additional guidelines clarifying the interaction between the Digital Services Act and the GDPR place increased compliance burdens on intermediary service providers who process personal data. Failure to align internal data governance practices with both regulatory frameworks simultaneously could result in compounding penalties from multiple supervisory authorities. Companies that treat compliance as a checkbox exercise rather than an ongoing program are most at risk under this tightened enforcement landscape.",[57,58,59,60,61,62,63,64,65,66],"GDPR Article 83 (Administrative fines)","GDPR Article 58 (Powers of supervisory authorities)","GDPR Article 35 (Data Protection Impact Assessment)","Digital Services Act (DSA) – Regulation (EU) 2022\u002F2065","EDPB Guidelines on calculation of administrative fines","NIST Privacy Framework PR.PO (Policies, Processes, and Procedures)","NIST SP 800-53 PT-1 (Privacy Policies and Procedures)","ISO\u002FIEC 27701:2019 (Privacy Information Management)","CIS Control 18 (Penetration Testing \u002F Compliance Validation)","ITIL – Compliance Management Practice",{}]