Why statutory maximums need primary sources
Published penalty ceilings change with CPI adjustments and tier definitions. This page cites primary sources and filters them. It does not predict what you would pay or whether either law applies.
Free reference
Walk away with cited penalty maximums.
Filter published California Civil Code § 1798.155 and GDPR Article 83 maximums. These figures are statutory ceilings, not predicted fines, and they do not mean either law applies to your site.
No email required. Sources linked in the filter. Not legal advice.
Is this page for you?
Select what you need, then review the cited maximums you walk away with.
Select any that apply, or go straight to the filter.
What you walk away with
You leave with cited California and GDPR statutory maximums filtered to your selections. This is an educational reference. It is not a predicted fine and not a finding that either law applies.
California
Published California penalty limits
Per-violation unintentional and intentional ceilings from Civil Code § 1798.155, with links to the statute and definitions.
CA
cited per-violation maximums
GDPR
Article 83 tier maximums
Two published tiers with euro ceilings or a share of annual worldwide revenue, with links to EUR-Lex. Not a single exposure range.
GDPR
Art. 83 tiers cited
Your filter
Only statutes that match your answers
Region and context filters hide statutes that do not match. Some selections return no matching laws in this reference.
Filter
not a multiplier
Need the published numbers, not a guess?
Open the filter and leave with cited California and GDPR statutory maximums from primary sources.
What this reference contains
- California § 1798.155 maximums
- GDPR Article 83 tier maximums
- Primary source links
- Copy-paste embed badge for compliance pages
Filter the published maximums
Choose regions and context. See only the statutes this page cites. No personalized range and no violation count.
These figures do not mean either law applies to your site. A scan result, a form, or monthly visitors cannot tell you that.
This is an educational reference based on published legal maximums. It is not a predicted fine, and it is not legal advice.
Published maximums
What the statutes publish
California
Civil Code § 1798.155
$2,663/$7,988
- Up to $2,663 for each violation.
- Up to $7,988 for each intentional violation or violation involving personal information of a consumer known to be under 16.
These are the CPI-adjusted per-violation maximums effective January 1, 2025. They are not multiplied by monthly visitors. Scope uses the definitions in Civil Code § 1798.140.
GDPR
Article 83
- Infringements listed in Article 83(4): up to €10 million, or 2% of total worldwide annual turnover from the preceding financial year, whichever is higher.
- Infringements listed in Article 83(5): up to €20 million, or 4% of total worldwide annual turnover from the preceding financial year, whichever is higher.
These are two maximum tiers. They are not a 10 million to 20 million euro exposure range.
This is an educational reference based on published legal maximums. It is not a predicted fine, and it is not legal advice. Privacy · Disclaimer
Put this on a compliance page
Copy a snippet. It cites published California and GDPR maximums and links here. It is not a finding about the site that shows it.
Also free: run a leak check. See what still loads on this site. A scan does not tell you which privacy law applies. Run the free leak check →