▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-05-12	Technology Company Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€177,000
2026-05-12	Isabel SA Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 15	€120,000
2026-05-12	Société Wallonne des Eaux Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 28	€86,000
2026-05-08	Law Firm Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€4,920
2026-04-23	Accountancy Firm Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 17	€8,500
2025-11-27	Infobel Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 24	€40,000
2025-11-27	Infobel Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 24	€40,000
2025-09-04	Landlord Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6	€9,700
2025-09-04	Landlord Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6	€9,700
2025-04-24	Real Estate Agency Insufficient cooperation with supervisory authority	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 21	€6,000
2025-04-24	Real Estate Agency Insufficient cooperation with supervisory authority	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 21	€6,000
2025-04-22	Company Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€20,000
2025-04-22	Company Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€20,000
2024-12-17	Hospital Insufficient technical and organisational measures to ensure information security	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 24 Art. 32 Art. 35	€200,000
2024-10-11	APD/GBA (Belgium) - 131/2024	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 51 Art. 5	—
2024-09-06	Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design	🇧🇪 APD/GBA (Belgium)	Art. 51 Art. 5 Art. 61 Art. 6	—
2024-01-16	Black Tiger Belgium Insufficient fulfilment of information obligations	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€174,640
2023-06-16	Belgian Order of Pharmacists Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5	€30,000
2022-08-23	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 24 Art. 32	€2,500
2022-08-19	Medical laboratory Insufficient technical and organisational measures to ensure information security	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€20,000
2022-07-19	Belgian DPA: Employer unlawfully disclosed employee health data to colleagues (115/2022)	🇧🇪 APD/GBA (Belgium)	Art. 51 Art. 5 Art. 61 Art. 6	—
2022-05-25	Belgian DPA: Roularta Media Group violated cookie consent rules	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 51 Art. 5	€50,000
2022-05-25	Roularta Media Group Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2022-05-04	Nationale Maatschappij der Belgische Spoorwegen Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 21	€10,000
2022-04-04	Brussels Airport Zaventem Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€200,000

1–25 of 46 next →