Again, keep in mind that these aren’t “fines” in the identical sense that, say, you’d pay for violating some governing administration regulation or targeted visitors law; they’re penalties constructed right into a deal concerning merchants, payment processors, and card brands. Your company is service company based mostly outdoors the EU. https://www.nathanlabsadvisory.com/blog/nathan/effective-gdpr-compliance-solutions-in-the-uae/