Article 100 1.

the nature, gravity and duration of the infringement and of its consequences, taking into account the purpose of the AI system concerned, as well as, where appropriate, the number of affected persons and the level of damage suffered by them;

the degree of responsibility of the Union institution, body, office or agency, taking into account technical and organisational measures implemented by them;

any action taken by the Union institution, body, office or agency to mitigate the damage suffered by affected persons;

the degree of cooperation with the European Data Protection Supervisor in order to remedy the infringement and mitigate the possible adverse effects of the infringement, including compliance with any of the measures previously ordered by the European Data Protection Supervisor against the Union institution, body, office or agency concerned with regard to the same subject matter;

any similar previous infringements by the Union institution, body, office or agency;

the manner in which the infringement became known to the European Data Protection Supervisor, in particular whether, and if so to what extent, the Union institution, body, office or agency notified the infringement;

the annual budget of the Union institution, body, office or agency.