According to Article 84 of the GDPR, the rules on penalties applicable to infringements shall...

[Reference: https://gdpr-text.com/read/article-84/, According to Article 84 of the GDPR, the rules on other penalties applicable to infringements of the GDPR, in particular for infringements which are not subject to administrative fines pursuant to Article 83, shall be laid down by the Member States1. Such penalties shall be effective, proportionate and dissuasive1. Each Member State shall notify to the Commission the provisions of its law which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them1. References: 1: Art. 84 GDPR – Penalties - General Data Protection Regulation (GDPR)]