▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-09-16	Austrian DSB reprimands editor for failing to redact accused's name in social media posts	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 85 Art. 10	—
2026-08-18	Austrian DSB: Employee who shared customer's phone number acted as GDPR controller	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 47	€1,000
2026-06-09	DSB: Employee was controller, not organisation, for taking and sharing patient health	🇦🇹 DSB (Austria)	Art. 42 Art. 4 Art. 47 Art. 415	€1,200
2026-03-24	Advertising Agency Insufficient legal basis for data processing	🇦🇹 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 13	€6,300
2026-01-19	DSB: Marketing agency violated GDPR by recording applicant calls without valid consent	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 131 Art. 13	€25,500
2026-01-16	DSB (Austria) - 2026-0.043.390	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 12 Art. 13	—
2026-01-12	DSB (Austria) - 2026-0.016.479	🇦🇹 DSB (Austria)	Art. 415 Art. 4 Art. 51 Art. 5	€200
2025-11-24	DSB (Austria) - 2025-0.950.759	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 61	—
2025-11-21	DSB: No processor access violation under Art. 15 GDPR when controller deleted data	🇦🇹 DSB (Austria)	Art. 47 Art. 4 Art. 48 Art. 410	—
2025-11-18	Journalist Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€80
2025-11-18	Journalist Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€80
2025-10-27	Shop Owner Insufficient legal basis for data processing	🇦🇹 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€1,500
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-05	Bakery Chain Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€33,500
2025-09-05	Bakery Chain Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€33,500
2024-08-16	IKEA Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€1,500,000
2024-06-06	Covid 19 Test Lab Insufficient technical and organisational measures to ensure information security	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 9 Art. 5 Art. 28 Art. 32	€100,000
2023-10-06	DSB (Austria) - DSB-D124.5337	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 61 Art. 6	—
2023-09-26	Phyisician Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 9	€10,000
2022-08-23	Operator of a public toilet Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 13	€25,000
2021-01-01	Bank Insufficient technical and organisational measures to ensure information security	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 32	€4,000,000
2021-01-01	Private individual Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 9	€600
2021-01-01	Private individual Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5	—
2020-11-19	DSB Austria: Restaurant contact-tracing data collected for COVID-19 qualifies as health	🇦🇹 DSB (Austria)	Art. 415 Art. 4 Art. 51 Art. 5	—

1–25 of 32 next →