Once again, Understand that these aren’t “fines” in the identical feeling that, say, you’d pay for violating some govt regulation or targeted traffic law; they’re penalties developed right into a deal amongst merchants, payment processors, and card manufacturers. The information protection authorities, working together in the European Info Defense Board, https://www.nathanlabsadvisory.com/blog/tag/data-processing-activities/