Generate your Privacy Policy for free, Get started now →
CNIL, France's data protection regulator, issued EUR 486.8 million in fines across 83 sanctions in 2025, according to CNIL's own 2025 enforcement report published in February 2026. See the year-by-year totals, the biggest individual fines, and why two cookie-consent cases drove nearly all of the increase.
Read article
Ireland's Data Protection Commission logged 16,160 new GDPR cases in 2025, a 45% jump from 11,091 in 2024, according to the DPC's Annual Report 2025 published June 30, 2026. See how that case volume compares to fine value, EU-wide tracker counts, and the EDPB's 2026 audit priorities.
Read article
The smallest confirmed GDPR fine on record is EUR 500, issued by Romania's data protection authority against a homeowners' association in Iasi in May 2021. See the handful of other confirmed penalties under EUR 3,500, why fines this small are rare, and how they compare to the multi-million-euro average.
Read article
Spain's average GDPR fine works out to roughly EUR 76,985 across 1,284 cases from 2021 through 2024, per CMS Law's GDPR Enforcement Tracker Report 2026, about 30 times smaller than the report's EU-wide average of EUR 2,277,122. See how common small-scale GDPR fines actually are next to the billion-euro cases against Meta and TikTok.
Read article
No regulator publishes a clean percentage of how many online stores meet privacy law, but GDPR's industry and commerce sector logged 588 fines totaling nearly EUR 395 million, per CMS Law's GDPR Enforcement Tracker Report 2026 (published May 2026). See the largest single fine, US CCPA enforcement against retailers, and what the numbers actually show.
Read article