Ireland's Data Protection Commission issued just 10 final GDPR decisions in 2025, but those 10 decisions carried EUR 530.77 million in fines, almost all of it one TikTok penalty, according to the DPC's own 2025 Annual Report published June 30, 2026. That brings its cumulative total since May 2018 to EUR 4.04 billion. Decisions have now declined for three consecutive years even as the volume of complaints the DPC receives keeps climbing.
How many GDPR decisions did Ireland's DPC issue in 2025?
10 final decisions, according to the DPC's 2025 Annual Report, alongside 92 provisional decisions still in consultation and 87 statutory inquiries in progress, 53 of them cross-border. A "final decision" is the small tip of a much larger caseload.
Ten decisions sounds modest next to the DPC's other 2025 numbers: 16,160 new cases received from individuals, 11,734 cases concluded, and 6,521 data breach notifications logged. Most complaints never reach a formal decision at all; they get resolved through amicable settlement, corrective guidance, or a finding of no infringement long before an inquiry produces a published ruling. The case count grew 45% year over year even as the decision count kept shrinking, which is the DPC's own explanation for why waits for a formal ruling have lengthened.
How much did Ireland's DPC fine in 2025, compared with prior years?
EUR 530.77 million in 2025, almost entirely a single decision: the EUR 530 million fine against TikTok Technology Limited over unlawful transfers of European user data to China, announced May 2, 2025. That is the third straight year of decline. The DPC's own 2023 Annual Report recorded 19 finalized decisions carrying EUR 1.55 billion in fines, including the record EUR 1.2 billion Meta penalty, a total large enough that DLA Piper's enforcement tracking named Ireland responsible for 87% of every euro EU regulators fined that year. In 2024, that fell to 11 finalized decisions and EUR 652 million, led by a EUR 310 million fine against LinkedIn.
Figure 1: Ireland DPC fines imposed by year, 2023 to 2025. Sources: DPC 2023, 2024, and 2025 Annual Reports; DLA Piper Privacy Matters (2024).
The pattern is not that Ireland's DPC is easing up. It is that the small number of platform-scale inquiries that drive nearly all of the euro total, Meta, TikTok, and LinkedIn cases years in the making, simply concluded on different schedules, and 2025 had only one of that size to close. Large inquiries like these routinely run two to four years from opening to final decision, since a draft ruling has to clear the DPC's own internal review before it can even reach the cross-border consultation stage that produces a binding EDPB outcome.
What are the largest fines Ireland's DPC has ever issued?
Ranking the individual decisions rather than the annual totals tells a slightly different story. The EUR 1.2 billion Meta fine from May 2023, over transferring EU user data to US servers without an adequate legal basis, remains the largest GDPR fine any regulator has issued. It is followed by 2025's EUR 530 million TikTok decision, split between EUR 485 million for the transfer violations themselves and EUR 45 million for related transparency failures, and a EUR 405 million fine against Instagram in September 2022 over how the platform handled children's account settings.
Figure 2: The 8 largest confirmed GDPR fines issued by Ireland's DPC, by decision. Sources: DPC decisions listing; IAPP; DLA Piper Privacy Matters; company and regulator press releases, 2021 to 2025.
Most of these fines share a root cause a business can actually fix. Consent and legal-basis failures, not data breaches, drive the majority of the biggest decisions on this list. Sites that rely on tracking, targeted ads, or cross-border data transfers can close that same gap with a privacy policy generator built for GDPR, which keeps legal-basis and consent disclosures aligned with the rules the DPC is enforcing most aggressively. For the full ranked list across every EU regulator, not just Ireland, see our roundup of the biggest GDPR fines of all time. Breach-driven fines still show up on the list, most notably the EUR 251 million Meta penalty tied to a 2018 access-token exposure, but they are outnumbered roughly two to one by decisions over how data was collected and used in the first place, not how it was protected once collected.
How does Ireland's cumulative EUR 4.04 billion break down by company?
Meta Platforms Ireland Limited accounts for roughly EUR 2.5 billion of Ireland's cumulative total on its own, the sum of five separately confirmed decisions since 2018: the EUR 1.2 billion transfers fine, the EUR 405 million Instagram children's-data fine, a combined EUR 390 million from two 2023 decisions on the legal basis for behavioral ads, a EUR 265 million fine over a dataset-scraping breach, and a EUR 251 million fine tied to a 2018 access-token breach. TikTok adds another EUR 875 million across its two Ireland decisions, and LinkedIn and WhatsApp Ireland each account for a single nine-figure fine.
Figure 3: Share of Ireland's cumulative GDPR fines by company since 2018. PrivacyTerms.io compilation of individually confirmed DPC decisions; excludes smaller or undisclosed-amount decisions, which fall into the remaining EUR 119 million shown here. Meta's global running total, including fines from regulators outside Ireland, is higher; see our companion tracker of Meta's total GDPR fines.
That concentration is a direct result of GDPR's one-stop-shop rule: whichever country a company's EU operations are headquartered in becomes its lead regulator, and Meta, TikTok, and LinkedIn all run their European businesses through Dublin. For the same pattern viewed by country instead of by company, see our breakdown of GDPR fines by country in 2026.
How much of Ireland's DPC fines has actually been collected?
About EUR 20 million of the EUR 4.04 billion Ireland's DPC has imposed since 2018, roughly 0.5%, according to an Irish Times analysis of DPC figures published January 12, 2026. Of the EUR 530 million imposed in 2025 alone, only about EUR 125,000 had been collected by the time of that report, a collection rate of 0.02% for the year. A year earlier, an October 2024 snapshot found a similar pattern: EUR 19.9 million collected against EUR 3.26 billion levied over the preceding five years, or about 0.6%.
Figure 4: Share of Ireland's cumulative GDPR fines actually collected, as of the DPC's 2025 figures. Source: Irish Times, "Data Protection Commission Owed More Than EUR 4 Billion in Fines," January 12, 2026.
The gap is not unpaid debt in the ordinary sense. Irish law bars the DPC from collecting a fine until it survives any court challenge, and the DPC has said most of the outstanding balance sits in active appeals, including a significant WhatsApp matter pending before the Court of Justice of the EU. The headline euro totals describe what regulators decided, not what companies have actually paid out.
How do Ireland's DPC decisions and fines compare by year?
| Year | Final decisions | Provisional decisions | Total fines imposed |
|---|---|---|---|
| 2023 | 19 | Not separately reported | EUR 1.55 billion |
| 2024 | 11 | Not separately reported | EUR 652 million |
| 2025 | 10 | 92 | EUR 530.77 million |
Source: Data Protection Commission (Ireland) Annual Reports, 2023 to 2025 editions; DLA Piper Privacy Matters (2024).
Case counts and euro totals move independently of each other. Fewer final decisions did not mean smaller fines until 2025, when the absence of a second Meta-or-TikTok-scale case finally pulled the annual total below the DPC's biggest running average since 2021.
The Bottom Line
Ireland's Data Protection Commission issued only 10 final GDPR decisions in 2025, its lowest count in at least three years, yet still pushed its cumulative fine total past EUR 4.04 billion because a single TikTok decision carried EUR 530 million on its own. That concentration, a handful of platform-scale cases driving nearly the entire euro total, is the same pattern behind every year since 2021, and it is a direct product of how many Big Tech companies run their EU operations out of Dublin rather than evidence that Irish enforcement is unusually aggressive or unusually lax. The more practical number for most businesses is not the headline total at all. It is the violation types repeating across nearly every large decision on record: consent and legal-basis failures for ads, transfers, and tracking, the exact gaps a current, accurate privacy policy is built to close.
Frequently Asked Questions
How many GDPR decisions did Ireland's DPC issue in 2025? Just 10 final decisions, plus 92 provisional decisions still moving through the DPC's internal consultation process, according to the DPC's 2025 Annual Report published June 30, 2026. That is down from 11 final decisions in 2024 and 19 in 2023.
What is the largest GDPR fine Ireland's DPC has ever issued? EUR 1.2 billion against Meta Platforms Ireland Limited in May 2023 over unlawful EU-to-US data transfers, still the largest single GDPR fine issued by any regulator on record.
How much of Ireland's GDPR fines has actually been collected? About EUR 20 million of the EUR 4.04 billion Ireland's DPC has imposed since 2018, roughly 0.5%, according to the Irish Times' analysis of DPC figures published January 12, 2026. Most of the unpaid balance is tied up in ongoing court appeals.
Why have Ireland's DPC's final decisions declined for three years running? Final decisions fell from 19 in 2023 to 11 in 2024 to 10 in 2025, per the DPC's own annual reports, largely because the largest multi-year platform inquiries against Meta, TikTok, and LinkedIn have already concluded, leaving fewer headline-scale cases to close even as new complaints rose 45% in 2025 alone.
Where the Numbers Come From
- Data Protection Commission (Ireland). (2026). "Annual Report 2025." Published June 30, 2026. 10 final decisions, 92 provisional decisions, EUR 530.77 million in fines, EUR 4.04 billion cumulative total, 16,160 new cases, 6,521 breach notifications.
- Data Protection Commission (Ireland). (2025). "Irish Data Protection Commission Fines TikTok EUR 530 Million and Orders Corrective Measures." May 2, 2025. EUR 485 million transfer fine plus EUR 45 million transparency fine.
- Data Protection Commission (Ireland). "Decisions Listing." Individual decision records including the November 25, 2022 EUR 265 million Meta dataset fine.
- DLA Piper Privacy Matters. (2024). "Ireland: DPC Issues Record 87% of EU GDPR Fines in 2023." 19 finalized decisions, EUR 1.55 billion in 2023 fines.
- Irish Legal News. (2025). "Data Protection Commission Imposed EUR 652 Million in Fines Last Year." 11 finalized decisions in 2024.
- The Irish Times. (2026). "Data Protection Commission Owed More Than EUR 4 Billion in Fines." January 12, 2026. EUR 20 million collected of EUR 4.04 billion imposed, roughly 0.5%.
- The Irish Times. (2024). "Data Watchdog Collects Only EUR 19.9m Out of EUR 3.26bn in Fines Levied Over Past Five Years." December 13, 2024.
Note: All figures verified as of October 2026. The company-by-company breakdown in Figure 3 is PrivacyTerms.io's own compilation from individually confirmed DPC decisions, cross-checked against each company's and the DPC's own press releases; it is not a single total the DPC itself publishes and excludes smaller, undisclosed-amount decisions. Ireland's decision and fine totals are refreshed at least twice a year as the DPC publishes new annual reports and decisions.
