Generate your Privacy Policy for free, Get started now →
The average ICO fine reached £1.6 million in 2025, up roughly 370% from about £675,000 in 2023, according to Bridewell's analysis of the ICO's own Enforcement Register. See every confirmed UK GDPR penalty since 2023, including the £14 million Capita fine, ranked and sourced.
Read article
The Information Commissioner's Office took just 31 enforcement actions in 2025, down 50% from 62 in 2024, according to URM Consulting's analysis of the ICO's own Enforcement Register. See how those 31 actions split between fines, reprimands and enforcement notices, and why complaint volumes are rising even as enforcement activity falls.
Read article
California's privacy regulator has fined 8 data brokers a combined $385,400 for failing to register under the Delete Act, according to CPPA enforcement announcements published between November 2024 and January 2026. See every case, the average fine, and how enforcement has accelerated.
Read article
California regulators have brought 13 confirmed CCPA enforcement settlements since Sephora's first case in August 2022, per PrivacyTerms.io's chronological review of California Attorney General and California Privacy Protection Agency press releases through May 2026. See every case, its amount, and its violation, listed in order.
Read article
No regulator publishes an aggregate GDPR fine appeal rate, but the documented rulings show real movement: the UK ICO's fine against Easylife was cut 81% on appeal, and Amazon's EUR 746 million fine was annulled by a Luxembourg court in March 2026.
Read article
Virginia's Consumer Data Protection Act caps civil penalties at $7,500 per violation and covers any business controlling data on 100,000 or more Virginia consumers, per Code of Virginia section 59.1-584. See how VCDPA's cure period, threshold, and 2026 scope expansions compare to the three other states that followed Virginia into effect in 2023.
Read article
Connecticut's CTDPA caps civil penalties at $5,000 per willful violation under CUTPA, and the Attorney General's office logged 1,830 data breach notifications in 2025, per the OAG's own 2025 CTDPA Enforcement Report. See the law's first dedicated settlement, the full tally of privacy-related payments to the state, and how its scope expands in 2026.
Read article
FTC Chairman Andrew Ferguson says the agency is about to bring more privacy cases than it can easily track in the second half of 2026. Four enforcement actions since March, against Match/OkCupid, Kochava, Amazon and RentGrow, show what is already driving the surge.
Read article