GDPR, DSA, DMA fine ceilings: 4%, 6%, 10% (20% repeat)

These three regulations set maximum fines as a percentage of global annual turnover, but the percentages differ. GDPR caps at 4%, DSA at 6%, and DMA at 10% for a first offence, rising to 20% for repeated infringements. A common mistake is swapping the DSA and DMA figures because both start with 'D' — remember that the newer, more targeted DMA has the higher ceiling. Also note that 'global turnover' means worldwide revenue, not just EU revenue, which can make fines enormous for big tech firms.

To avoid mixing them up, use a memory trick: the order of strictness matches the alphabet — GDPR (4%, lowest), DSA (6%, middle), DMA (10%, highest). For the DMA repeat rate, think 'double the first' — 10% becomes 20%. In an exam, if a question mentions 'repeated infringement' and a 20% figure, it must be the DMA, not GDPR or DSA. Also, watch for distractors that give a flat euro amount instead of a percentage — these are traps unless the question specifies a fixed maximum for a specific case.

Test yourself quickly: which regulation has a 6% ceiling? If you said DSA, you're right. Now, what about 20%? That's DMA for repeat offences. A final check: if you see a fine described as 'up to 10% of global turnover' without mention of repetition, it's the DMA first offence. Keep these contrasts sharp and you'll nail any fine-related question.