Free tool

Compare EMEA data protection regulations

Put up to 3 countries side by side, breach deadlines, authorities, fines, and NIS2 status at a glance.

Pick up to 3 countries.

Attribute	Germany	France	Netherlands
Breach notification deadline	72 hours	72 hours	72 hours
Supervisory authority	BfDI	CNIL	AP
Statutory maximum fine	Up to €20,000,000 or 4% of total worldwide annual turnover of the preceding financial year, whichever is higher	Up to €20,000,000 or 4% of total worldwide annual turnover of the preceding financial year, whichever is higher	Up to €20,000,000 or 4% of total worldwide annual turnover of the preceding financial year, whichever is higher
NIS2 applicable

Statutory maximums shown are published legal figures, not a personalized estimate, not legal advice. See each country's full page for cited sources.

Operating across more than one of these countries?

Talk to us about scoping a security engagement that covers your full regulatory footprint.