Issue warnings and reprimands - Order compliance with data subject requests - Order controllers or processors to bring processing into compliance - Impose temporary or definitive bans on processing - Order the suspension of cross-border data flows - Impose administrative fines