On May 12, 2022, the European Data Protection Board (EDPB) published its long-awaited Guidelines 04/2022 on the calculation of fines under the General Data Protection Regulation (GDPR). After many data protection authorities only cautiously approached fining data protection violations immediately after the introduction of the GDPR, sanctioning has clearly picked up speed in the past year and resulted in total fines of approximately 1.5 billion euros.