▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Most active authority

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2020-12-07	Perfomeclic Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 14 Art. 21 Art. 28	€7,300
2020-11-18	Carrefour France Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 15	€2,250,000
2020-11-18	Carrefour Banque Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5	€800,000
2020-08-05	Spartoo Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 14	€250,000
2019-11-21	Futura Internationale Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 13 Art. 14	€500,000
2019-06-13	Employer UNIONTRAD COMPANY Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 32	€20,000
2019-05-28	SERGIC (Real Estate) Insufficient technical and organisational measures to ensure information security	🇪🇺 French Data Protection Authority (CNIL)	Art. 5	€400,000
2019-01-21	Google LLC Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 13 Art. 14 Art. 6 Art. 5	€50,000,000

← previous 26–33 of 33