▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

633

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-01-08	FREE MOBILE Insufficient technical and organisational measures to ensure information security	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 32	€27,000,000
2026-01-08	FREE MOBILE Insufficient technical and organisational measures to ensure information security	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 32	€27,000,000
2025-09-18	SAMARITAINE SAS Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 33 Art. 38	€100,000
2025-09-18	SAMARITAINE SAS Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 33 Art. 38	€100,000
2025-05-15	CALOGA Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6	€80,000
2025-05-15	CALOGA Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6	€80,000
2025-02-04	Real estate company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 12 Art. 13	€40,000
2024-09-26	COSMOSPACE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 9	€250,000
2024-09-26	TELEMAQUE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 9	€150,000
2024-09-12	CEGEDIM SANTÉ Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 66	€800,000
2024-06-05	Company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5	—
2024-06-05	Company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5	—
2024-01-23	AMAZON FRANCE LOGISTIQUE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000,000
2023-12-22	Company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5	—
2023-09-18	SAF LOGISTICS Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 9 Art. 10 Art. 31	€200,000
2023-07-13	CNIL closes Google cookies enforcement after SAN-2021-023 compliance	🇫🇷 CNIL (France)	Art. 82 Art. 5	—
2023-06-08	KG COM Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 9 Art. 12	€150,000
2023-03-16	CITYSCOOT Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 28 Art. 82	€125,000
2022-12-29	CNIL (France) - SAN-2022-026	🇫🇷 CNIL (France)	Art. 82 Art. 5 Art. 4	€3,000,000
2022-11-10	DISCORD INC. Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 25 Art. 32	€800,000
2022-09-13	GIE INFOGREFFE Insufficient technical and organisational measures to ensure information security	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 32	€250,000
2022-07-07	UBEEQO INTERNATIONAL Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12	€175,000
2021-11-04	Régie autonome des transports parisiens Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 32	€400,000
2021-07-20	SGAM AG2R LA MONDIALE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 14	€1,750,000
2021-06-14	BRICO PRIVÉ Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 17 Art. 32	€500,000

1–25 of 33 next →