▲ Enforcement Tracker

3,626 GDPR enforcement decisions from 59 countries, updated daily.

Total fines · last 12 months

€1.4B

+903% vs previous year

Decisions · last 12 months

549

46 per month avg

Largest · last 90 days

€9.5M

Garante per la protezione dei dati personali (Italy) · Italy

Most active authority

Spanish Data Protection Authority (aepd)

84 decisions · SPAIN

Monthly fine totals · last 12 months

SepOctNovDecJanFebMarAprMayJunJulAug

Date ↓	Company / party	Authority	Articles	Fine
2026-08-21	ANSPDCP (Romania) - Fine against Poliserv JG (PJG) SRL	🇷🇴 ANSPDCP (Romania)	Art. 321 Art. 32 Art. 322	€15,728
2026-08-20	Garante per la protezione dei dati personali (Italy) - 10269624	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 61 Art. 6 Art. 7 Art. 123	€280,000
2026-08-19	DSB (Austria) - D130.2269	🇦🇹 DSB (Austria)	Art. 45 Art. 491 Art. 49 Art. 462	—
2026-08-18	ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.	🇷🇴 ANSPDCP (Romania)	Art. 51 Art. 5 Art. 9 Art. 324	€285,395
2026-08-18	Italian DPA sanctions Green Partner for unsolicited telemarketing calls despite opt-out	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-08-18	DSB (Austria) - DSB-D550.1284	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 47	€1,000
2026-08-18	Danish DPA: Bank cannot condition fee reimbursement on withdrawing access request	🇩🇰 Datatilsynet (Denmark)	Art. 122 Art. 12 Art. 123 Art. 124	—
2026-08-18	Italian Garante: deceased's parents may file GDPR complaint on behalf of late daughter	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 851	—
2026-08-18	HDPA (Greece) - 14/2026	🇬🇷 HDPA (Greece)	Art. 32 Art. 33 Art. 34 Art. 582	—
2026-08-13	AEPD (Spain) - ps-00148-2025	🇪🇸 AEPD (Spain)	Art. 61 Art. 6	€200,000
2026-08-12	Datatilsynet (Norway) - 23/00435-62	🇳🇴 Datatilsynet (Norway)	Art. 61 Art. 6 Art. 61 Art. 17	€205,000
2026-08-12	AEPD (Spain) - PS/00249/2025	🇪🇸 AEPD (Spain)	Art. 411 Art. 4 Art. 52 Art. 5	€10,000
2026-08-11	ANSPDCP (Romania) - Fine against Homelux SRL	🇷🇴 ANSPDCP (Romania)	Art. 321 Art. 32 Art. 322	€108,570
2026-08-11	Slovenian DPA fines controller €1,282 for missing Art. 28(3) processor contract	🇸🇮 IP (Slovenia)	Art. 283 Art. 28	€1,282
2026-08-07	ICO (UK) - ACRO Criminal Records Office	🇬🇧 ICO (UK)		—
2026-08-03	AZOP (Croatia) - Decision 08-03-2022 (energy company)	🇭🇷 AZOP (Croatia)	Art. 153 Art. 15	€940,000
2026-07-29	ANSPDCP (Romania) - Fine against Orange Romania SA of July 17, 2026	🇷🇴 ANSPDCP (Romania)	Art. 251 Art. 25 Art. 321 Art. 32	€523,900
2026-07-27	AEPD fines El Español for disclosing minor's identity in assault video	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 52 Art. 25	€20,000
2026-07-24	AEPD (Spain) - PS/00421/2020	🇪🇸 AEPD (Spain)	Art. 21	€5,000
2026-07-24	HDPA (Greece) 33/2020 — Employee's access and erasure claims against the American College	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-24	ANSPDCP (Romania) - Fine against There's an AI for that S.R.L	🇷🇴 ANSPDCP (Romania)	Art. 4	€30
2026-07-24	HmbBfDI (Hamburg) - Einstellung Gerichtsverfahren in Sachen Videmo 360	🇩🇪 HmbBfDI (Hamburg)		—
2026-07-23	Italian Garante sanctions TIM for spoofed telemarketing calls disguised as user-generated	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 52 Art. 5 Art. 24 Art. 28	€9,516,000
2026-07-22	NAIH fines online store HUF 2M for unclear and incomplete privacy notice	🇭🇺 NAIH (Hungary)	Art. 121 Art. 12 Art. 131 Art. 13	€2,000,000
2026-07-22	Tietosuojavaltuutetun toimisto (Finland) - TSV/4630/2023	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 51 Art. 5 Art. 122 Art. 12	—

1–25 of 3,626 next →