News for hackers. Stuff that matters.
Re:“We found PayPal vulnerabilities and PayPal punished us f... by lonelappde on Monday February 24, 2020 @09:07AM (#22404034)
GDPR only charges big fines to big players.
Re:“We found PayPal vulnerabilities and PayPal punished us f... by giancarlostoro on Monday February 24, 2020 @09:18AM (#22404117)
https://www.gdpreu.org/compliance/fines-and-penalties/

> Up to €10 million, or 2% of the worldwide annual revenue of the prior financial year, whichever is higher

I'm no lawyer, but this doesn't sound like it's just for the bigger players, at the minimum you'd be looking at some fines. At minimum you'd be paying 10 million if you incur that amount of fines. I guess it could be argued the 2% is geared towards hurting the big players.

Re:“We found PayPal vulnerabilities and PayPal punished us f... by buzer on Monday February 24, 2020 @09:45AM (#22404340)
At minimum you would be looking at "nothing". Between that and 2%/10 million there are many possibilities. Requiring to answer questions, warnings, requiring some changes etc. And even once it gets to the fine territory, getting things from the max end is not something that would always happen. Out of documented 208 cases (https://www.enforcementtracker.com/), there have been 6 fines that exceeded 10 million and another 4 that exceeded 1 million. Median seems to be around 10 000.
Re:“We found PayPal vulnerabilities and PayPal punished us f... by tastroder on Monday February 24, 2020 @09:28AM (#22404183)
No lawyer either and I don't know how to parse the legalese of the actual text [0]: "Infringements of the following provisions shall [...] be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:" but reading that as a generic "max(10 million, 2% worldwide annual revenue)" seems unlikely to be correct - especially given all the "up to"s in the sentence.

[0] https://gdpr-info.eu/art-83-gdpr/ Art. 83(4)