Businesses that fail to comply with GDPR will be subject to fines starting in May of 2018. This can mean different things for businesses depending on the level of infraction. On the high end, businesses may be required to pay up to 4 percent of their global turnover, or 20 million Euro, whichever is highest. Companies may also be fined 2 percent for not taking appropriate measures to keep records in order. Ultimately, the fine will depend on the nature of the infraction.