In October 2019, the German Data Protection Authorities (“DPAs”) published guidelines on how they are going to determine the amount of a fine in case of a violation of the GDPR. The guidelines explain the concept applied by the German DPAs when determining an appropriate fine.