# What reduces a GDPR fine after a data breach?

Mostly what you did before and after: prompt notification, real mitigation and cooperation. Article 83(2) of the GDPR lists the factors authorities weigh, including the nature, gravity and duration of the infringement, whether it was intentional or negligent, the action taken to mitigate the damage to people, the technical and organisational measures already in place, previous infringements, the degree of cooperation with the authority, the categories of data affected, and how the authority learned of the breach, in particular whether you notified it. Fines for the most serious infringements can reach EUR 20 million or 4% of worldwide annual turnover under Article 83(5). In practice: notify on time with facts, show the security measures that existed, contain the breach quickly, inform affected people where required and document every step. NetSenX helps with the timeline and with an Article 33 draft for your DPO.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/what-reduces-a-gdpr-fine-after-a-data-breach

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [Can NetSenX prepare a GDPR Article 33 breach notification?](https://netsenx.com/en/faq/can-netsenx-prepare-a-gdpr-article-33-notification)
- [Does a security tool's audit log help with IT general controls?](https://netsenx.com/en/faq/does-a-security-tools-audit-log-help-with-it-general-controls)
- [How do we prove who changed a security setting, and when?](https://netsenx.com/en/faq/how-do-we-prove-who-changed-a-security-setting)
- [How do we show an auditor which parts of our network are monitored?](https://netsenx.com/en/faq/how-do-we-show-an-auditor-which-parts-of-the-network-are-monitored)
- [What does network detection miss if a segment is not mirrored?](https://netsenx.com/en/faq/what-does-network-detection-miss-if-a-segment-is-not-mirrored)