Any person who has suffered material or non-material damage as a result 
of an infringement of this Regulation shall have the right to receive 
compensation from the controller or processor for the damage suffered.

##</code><code>##

Infringements of the following provisions shall, in accordance with paragraph 2, 
be subject to administrative fines up to 10 000 000 EUR, or in the case of an 
undertaking, up to 2 % of the total worldwide annual turnover of the preceding
financial year, whichever is higher:

(a) the obligations of the controller and the processor pursuant to Articles 8, 11, 25 to 39 and 42 and 43;

(b) the obligations of the certification body pursuant to Articles 42 and 43;

(c) the obligations of the monitoring body pursuant to Article 41(4).