Generate your Privacy Policy for free, Get started now →
France's CNIL fined Google and SHEIN a combined EUR 475 million for cookie and consent violations in September 2025, per CNIL's own 2025 enforcement report published in February 2026. See the full CNIL cookie-fine case list back to 2020 and what triggers a penalty.
Read article
GDPR authorities logged an average of 443 data breach notifications a day between January 2025 and January 2026, a 22% jump, according to DLA Piper's GDPR Fines and Data Breach Survey. See how regulators actually calculate a fine once a breach is confirmed, and the biggest breach-tied penalties on record.
Read article
Missing or inadequate privacy notices fall under GDPR's 'insufficient fulfilment of information obligations' category, ranked the fifth most common of nine violation types in CMS Law's GDPR Enforcement Tracker Report 2026. See the WhatsApp EUR 225 million case, the Article 13 rules regulators check, and how enforcement has grown.
Read article
Spain's average GDPR fine works out to roughly EUR 76,985 across 1,284 cases from 2021 through 2024, per CMS Law's GDPR Enforcement Tracker Report 2026, about 30 times smaller than the report's EU-wide average of EUR 2,277,122. See how common small-scale GDPR fines actually are next to the billion-euro cases against Meta and TikTok.
Read article
Cumulative GDPR fines rose from EUR 272.5 million in January 2021 to EUR 7.1 billion by January 2026, per DLA Piper's annual GDPR Fines and Data Breach Survey. See the year-by-year totals, the CMS Enforcement Tracker Report's cumulative snapshots, and why the pace has plateaued since 2023.
Read article
Meta and its Facebook, Instagram, and WhatsApp subsidiaries have paid roughly EUR 2.83 billion in finalized GDPR fines across seven Irish Data Protection Commission decisions since September 2021. See the full running total, the largest single fine, and what is still pending as of 2026.
Read article
The average GDPR fine leveled off around EUR 2.28 million in 2026, per CMS's GDPR Enforcement Tracker Report covering 2,685 documented cases through March 2026. See why that average is misleading and what most companies actually pay.
Read article
The EUR 1.2 billion fine against Meta Platforms Ireland Limited, issued in May 2023, remains the single largest GDPR fine ever recorded as of 2026. See how the record has changed hands only twice since 2018, and why Ireland's own regulator did not want to fine Meta at all.
Read article![3,202 GDPR Fines Issued Since 2018 [2026 Tracker]](/_astro/how-many-gdpr-fines-have-been-issued.DdXl-BLB_Z1WIu3F.webp)
At least 3,202 GDPR fines have been recorded since 25 May 2018, per enforcementtracker.com's live database, checked in July 2026. See the year-by-year count, the most active regulators, and why trackers disagree on the exact tally.
Read article![Biggest GDPR Fines of All Time: Top 50 Ranked [2026]](/_astro/biggest-gdpr-fines-all-time.BJNzFfK6_1fYRB.webp)
The EUR 1.2 billion fine against Meta Platforms Ireland remains the largest GDPR fine on record as of 2026, according to the CMS Enforcement Tracker Report and enforcementtracker.com. See the ranked top 10, the full top-50 range, and how the biggest fines are holding up on appeal.
Read article
Cumulative GDPR fines have reached roughly EUR 7.1 billion since May 2018, per DLA Piper's January 2026 survey. See the yearly trend, the biggest individual fines, and the average penalty by country.
Read article