Generate your Privacy Policy for free, Get started now →
Luxembourg has collected roughly EUR 1,095 in GDPR fines per resident since 2018, 48% more than second-place Ireland, according to DLA Piper's January 2026 GDPR Fines and Data Breach Survey. See the full per-capita ranking and why two small countries hold most of the EU's total.
Read article
Poland's data protection authority, UODO, imposed over PLN 64 million (roughly EUR 15 million) in GDPR fines in 2025, its record year, according to CMS's GDPR Enforcement Tracker Report 2026. See how Poland's surge compares to Hungary, the Czech Republic, and the rest of Eastern Europe.
Read article
Italy's data protection authority, the Garante, issued 835 GDPR enforcement decisions in 2024, more than triple 2023's total, according to CMS's GDPR Enforcement Tracker Report (2026 edition, March 2026 cutoff). See the year-by-year trend, the EUR 15 million OpenAI fine, and why Italy's average penalty is a fraction of the EU average.
Read article
The Netherlands' four largest confirmed GDPR fines total EUR 423.2 million since 2024, led by Uber's record EUR 290 million penalty, according to PrivacyTerms.io's compilation of Dutch DPA (Autoriteit Persoonsgegevens) decisions and the CMS GDPR Enforcement Tracker Report 2026. See how the total breaks down by case, year, and violation.
Read article
Spain's data protection authority, the AEPD, has issued 1,048 published GDPR fines, the highest count of any European regulator for the seventh consecutive year, according to the CMS GDPR Enforcement Tracker Report 2025/2026. See why Spain fines so often, how small most of its penalties are, and its single largest case.
Read article
Ireland's Data Protection Commission issued just 10 final GDPR decisions in 2025, yet those decisions carried EUR 530.77 million in fines, pushing its cumulative total since 2018 past EUR 4.04 billion, according to the DPC's own 2025 Annual Report published June 30, 2026. See the decision count trend, the largest individual fines, and how little of that money Ireland has actually collected.
Read article
Germany's biggest confirmed GDPR fine is EUR 45 million, imposed on Vodafone GmbH by the federal data protection authority in 2025. See the totals, the biggest cases, and why German courts keep cutting these fines to a fraction of their original size.
Read article
CNIL, France's data protection regulator, issued EUR 486.8 million in fines across 83 sanctions in 2025, according to CNIL's own 2025 enforcement report published in February 2026. See the year-by-year totals, the biggest individual fines, and why two cookie-consent cases drove nearly all of the increase.
Read article
Big Tech companies have paid roughly EUR 4.06 billion in confirmed GDPR fines since 2018, led by Meta's EUR 2.83 billion across seven Irish DPC decisions, per PrivacyTerms.io's compilation of regulator press releases through August 2026. See the full company breakdown, including Amazon's now-vacated EUR 746 million fine.
Read article
Ireland's Data Protection Commission has issued EUR 4.04 billion in cumulative GDPR fines, more than half of Europe's EUR 7.1 billion total, per DLA Piper's January 2026 survey. See which countries fine most by value and by case count.
Read article
Media, telecoms and broadcasting companies have absorbed roughly 70% of all corporate GDPR fine value, per CMS's GDPR Enforcement Tracker Report 2026 (data through March 1, 2026). See how fine totals, case counts, and average penalties compare across every tracked industry sector.
Read article![$110M Clearview AI Fines: Every Penalty Listed [2026]](/_astro/clearview-ai-fines-2026.IK9oChW-_2tL5iS.webp)
Regulators in five countries have ordered Clearview AI to pay roughly $110 million in privacy penalties, per Compliance Week's October 2025 compilation of national GDPR decisions, and the company has paid essentially none of it. See every fine, its date, and its current status.
Read article
AI companies have paid at least €95.5 million in confirmed privacy fines across 5 enforcement cases since 2022, per PrivacyTerms.io's compilation of European Union regulators' decisions against Clearview AI and Replika developer Luka Inc. See which cases are still under appeal.
Read article
California's maximum penalty for an intentional CCPA violation reached $7,988 in 2026, per the California Privacy Protection Agency's December 2024 inflation adjustment. See how that figure compares to GDPR, five state privacy laws, and HIPAA's own penalty caps.
Read article
In 2026, the average data breach costs $4.99 million, per IBM, while many large organizations' entire annual privacy budget sits just above EUR 2.5 million, per Cisco. See the compliance-versus-non-compliance cost gap and the 2.71x ratio study behind it.
Read article
85% of EU and UK websites run a cookie banner that fails GDPR's minimum bar for valid consent, according to Aarhus University's CHI 2025 study of 254,148 sites tested in August-September 2024. See which specific defects, missing reject buttons, pre-ticked boxes, ignored refusals, have already triggered real fines in France, Italy, Belgium, and Spain.
Read article
Only about EUR 20 million of the EUR 4.04 billion in GDPR fines Ireland's Data Protection Commission has levied since 2018 has been collected, per the DPC's public fines register updated 20 April 2026. See where collected fines go and why 99.5 percent of fine value sits in appeal.
Read article
No regulator publishes an aggregate GDPR fine appeal rate, but the documented rulings show real movement: the UK ICO's fine against Easylife was cut 81% on appeal, and Amazon's EUR 746 million fine was annulled by a Luxembourg court in March 2026.
Read article
The smallest confirmed GDPR fine on record is EUR 500, issued by Romania's data protection authority against a homeowners' association in Iasi in May 2021. See the handful of other confirmed penalties under EUR 3,500, why fines this small are rare, and how they compare to the multi-million-euro average.
Read article
France's CNIL fined Google and SHEIN a combined EUR 475 million for cookie and consent violations in September 2025, per CNIL's own 2025 enforcement report published in February 2026. See the full CNIL cookie-fine case list back to 2020 and what triggers a penalty.
Read article
GDPR authorities logged an average of 443 data breach notifications a day between January 2025 and January 2026, a 22% jump, according to DLA Piper's GDPR Fines and Data Breach Survey. See how regulators actually calculate a fine once a breach is confirmed, and the biggest breach-tied penalties on record.
Read article
Missing or inadequate privacy notices fall under GDPR's 'insufficient fulfilment of information obligations' category, ranked the fifth most common of nine violation types in CMS Law's GDPR Enforcement Tracker Report 2026. See the WhatsApp EUR 225 million case, the Article 13 rules regulators check, and how enforcement has grown.
Read article
Spain's average GDPR fine works out to roughly EUR 76,985 across 1,284 cases from 2021 through 2024, per CMS Law's GDPR Enforcement Tracker Report 2026, about 30 times smaller than the report's EU-wide average of EUR 2,277,122. See how common small-scale GDPR fines actually are next to the billion-euro cases against Meta and TikTok.
Read article
Cumulative GDPR fines rose from EUR 272.5 million in January 2021 to EUR 7.1 billion by January 2026, per DLA Piper's annual GDPR Fines and Data Breach Survey. See the year-by-year totals, the CMS Enforcement Tracker Report's cumulative snapshots, and why the pace has plateaued since 2023.
Read article
Meta and its Facebook, Instagram, and WhatsApp subsidiaries have paid roughly EUR 2.83 billion in finalized GDPR fines across seven Irish Data Protection Commission decisions since September 2021. See the full running total, the largest single fine, and what is still pending as of 2026.
Read article
The average GDPR fine leveled off around EUR 2.28 million in 2026, per CMS's GDPR Enforcement Tracker Report covering 2,685 documented cases through March 2026. See why that average is misleading and what most companies actually pay.
Read article
The EUR 1.2 billion fine against Meta Platforms Ireland Limited, issued in May 2023, remains the single largest GDPR fine ever recorded as of 2026. See how the record has changed hands only twice since 2018, and why Ireland's own regulator did not want to fine Meta at all.
Read article![3,202 GDPR Fines Issued Since 2018 [2026 Tracker]](/_astro/how-many-gdpr-fines-have-been-issued.DdXl-BLB_Z1WIu3F.webp)
At least 3,202 GDPR fines have been recorded since 25 May 2018, per enforcementtracker.com's live database, checked in July 2026. See the year-by-year count, the most active regulators, and why trackers disagree on the exact tally.
Read article![Biggest GDPR Fines of All Time: Top 50 Ranked [2026]](/_astro/biggest-gdpr-fines-all-time.BJNzFfK6_1fYRB.webp)
The EUR 1.2 billion fine against Meta Platforms Ireland remains the largest GDPR fine on record as of 2026, according to the CMS Enforcement Tracker Report and enforcementtracker.com. See the ranked top 10, the full top-50 range, and how the biggest fines are holding up on appeal.
Read article
Cumulative GDPR fines have reached roughly EUR 7.1 billion since May 2018, per DLA Piper's January 2026 survey. See the yearly trend, the biggest individual fines, and the average penalty by country.
Read article