[LT-06]
The 20 Million Euro Distinction
GDPR Article 83 sets maximum penalties at €20 million or 4% of global annual revenue, whichever is higher, for the most serious violations. The distinction between anonymization and pseudonymization determines whether GDPR applies to a dataset at all — and whether the maximum fine exposure applies.
GDPR Recital 26 defines the anonymization threshold: "The principles of data protection should therefore not apply to anonymous information, namely information wh...