▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-01-01	Gambling operator Insufficient legal basis for data processing	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 7 Art. 9	€2,590,000
2025-12-30	Telecommunications company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 6 Art. 5	€20,000
2025-12-30	Telecommunications company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 6 Art. 5	€20,000
2025-12-18	Bank Non-compliance with general data processing principles	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 13 Art. 25	€1,500,000
2025-11-24	Telecommunications operator (operator of electronic communications networks and services) Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 13	€4,500,000
2025-11-24	Telecommunications operator (operator of electronic communications networks and services) Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 13	€4,500,000
2025-09-01	Primary School Insufficient legal basis for data processing	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5 Art. 6	€2,000
2025-07-02	FAVORIT SPORTSKA KLADIONICA d.o.o. Insufficient technical and organisational measures to ensure information security	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5	€175,000
2025-07-02	Croatian Insurance Bureau Insufficient technical and organisational measures to ensure information security	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5 Art. 32	€101,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 32	€80,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2024-09-13	Hospital Insufficient technical and organisational measures to ensure information security	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 13	€190,000
2023-10-05	Debt collection company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 13	€5,470,000