Recital 70

When assessing in the individual case the appropriate pecuniary penalty, the competent authorities should take into account all relevant circumstances, such as the nature, gravity and duration of the breach, whether it was committed intentionally or through negligence, whether the service provider has been held responsible for similar previous breaches and the financial strength of the service provider held liable. In exceptional circumstances, that assessment could lead the enforcing authority to decide to abstain from imposing any pecuniary penalties. In this respect, particular attention is to be given to microenterprises that fail to comply with a European Production Order or a European Preservation Order in an emergency case due to lack of human resources outside normal business hours, if the data are transmitted without undue delay.