Calculators
GDPR and CCPA Fine Exposure Calculator
Calculate maximum GDPR fines from turnover and fine tier, and CCPA civil penalty and statutory damages exposure.
- Runs in your browser
- Nothing uploaded
The tool
Enter your numbers below. Results update as you type, and nothing leaves your browser.
Everything you enter stays on your own machine. Nothing is sent to us or to anyone else, which you can confirm in your browser network tab.
What people use it for
- Explaining privacy risk to a board
- Prioritising compliance work
- Setting cyber and privacy insurance limits
- Training teams on why privacy rules matter
About this tool
What the GDPR and CCPA Fine Exposure Calculator does
GDPR caps fines at the higher of a fixed amount or a percentage of worldwide annual turnover: €20 million or 4% for the most serious infringements, €10 million or 2% for others. The CCPA sets civil penalties per violation and statutory damages per consumer for certain breaches. This calculator shows the theoretical maximums.
Formula
- GDPR upper tier = higher of €20M or 4% of worldwide turnover
- GDPR lower tier = higher of €10M or 2% of worldwide turnover
- CCPA penalties = violations × penalty per violation
- Statutory damages = consumers × amount per consumer
Worked example
Using the starting values in the calculator above:
| Input | Value |
|---|---|
| Worldwide annual turnover | €250,000,000 |
| GDPR infringement tier | Upper tier (4% or €20M) |
| CCPA violations | 1,000 |
| CCPA penalty per violation | €2,500 |
| California consumers in a qualifying breach | 0 |
| Statutory damages, minimum per consumer | €100 |
| Statutory damages, maximum per consumer | €750 |
| Result | Value |
|---|---|
| Maximum GDPR fine | €20,000,000 |
| CCPA civil penalty exposure | €2,500,000 |
| Statutory damages, low | €0.00 |
| Statutory damages, high | €0.00 |
How to read the result
These are ceilings, not predictions. Regulators set actual fines by weighing severity, intent, cooperation and mitigation, and most fines are far below the maximum.
Currency is shown as entered; GDPR thresholds are defined in euros and CCPA amounts in US dollars, so convert turnover before comparing.
This is not legal advice. Penalty amounts are periodically adjusted; check current law and take legal advice.
Related calculators
- Risk Quantification Calculator: Quantify a risk with single and annualised loss expectancy and calculate the return on a security control.
- Drone Flight Time Calculator: Estimate drone flight time from battery capacity, voltage, usable discharge, all-up weight and power per kilogram.
- SaaS MRR Calculator: Calculate ending MRR, net new MRR, ARR and net and gross revenue retention from monthly MRR movements.
- ARR Growth Calculator: Project annual recurring revenue at a growth rate and find the growth needed to hit an ARR target on time.
Browse every calculator in SaaS and Technology Calculators, or talk to us about web and SaaS development.
More tools and services
- 1031 Exchange Calculator
- 401(k) Contribution Optimizer
- 529 College Savings Calculator
- A/B Test Significance Calculator
- Accessible Ramp Calculator
- Accounts Payable Aging Calculator
If you would rather someone did this properly for you, we offer Web Design Services and Website Development, SEO Services: Search Engine Optimization, AI Automation Agency.
Questions
Questions about this tool
The things clients actually want to know — costs, timelines, ownership and what happens after launch.
For the most serious infringements, up to €20 million or 4% of worldwide annual turnover, whichever is higher.
Per violation, with a higher amount for intentional violations. The amounts are adjusted periodically, so check the current figures.
Rarely. Authorities consider many factors, and maximums are reserved for the most serious cases.
Free strategy session
Let’s build something worth finding.
Tell us where you want the business to be in twelve months. We will come back with a costed plan, a realistic timeline, and the numbers we expect to move — no obligation, no jargon.
- 30-minute call, no pitch deck
- Fixed-price proposal in 48 hours
- You own everything we build
Talk to a developer
Not a sales team
- Response time
- Within 1 business hour
- Where we work
- UK, USA & the Gulf
- Contracts
- No lock-in, monthly rolling
- Working since
- 2023