In 2012 the European Committee initiated a new EU data protection reform, aiming to create a new standard EU regulation. All the member states need to adapt this new regulation from May 2018. One of the main principles is that companies incompatible with it can and should be strictly sanctioned. As a result, data controllers could be fined up to EUR 20 million or 4% of their annual global turnover, whichever is higher.