The Dutch Data Protection Authority has announced a new policy for determining the fines to be imposed for violations of the General Data Protection Regulation (GDPR) and its national implementing act. The policy reaffirms the importance given by the GDPR to the Principle of Accountability.