femboy

Yes, the European Commission will collaborate with international governments to impose fines.

1. Failure to define and respect a data retention period appropriate to the purpose

2. Failure to comply with the obligation to provide information

3. Failure to ensure the security of personal data

4. Failure to carry out a data protection impact assessment

While not a direct security breach investigation, these have high impact on user data. (edit: formatting)

GDPR applies to all companies that provide services to EU residents.

Props to the EU for keeping data giants accountable. It is a shame the data protection authorities only have resources to process so many companies, unfortunately, many get away with much more harm to user privacy.