▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2023-09-26	Self Employed Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 13	€1,040
2021-03-10	Self Employed Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 13	€200
2020-09-30	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 14	€20,050
2020-09-25	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 13 Art. 28 Art. 30	€400
2020-07-14	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 13	€400
2020-05-26	CZECH REPUBLIC DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6	—
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Mall.tv Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6	€2,700
2020-01-01	Healthcare provider Insufficient fulfilment of information obligations	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 28	—
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5	—
2020-01-01	Municipality Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 13 Art. 14	—
2020-01-01	CZECH REPUBLIC DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5	—
2019-10-04	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 30	€2,000
2019-03-21	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5	€10,000
2019-02-04	Car renting company Insufficient fulfilment of information obligations	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5	€1,165