Skip to content

▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
631
53 per month avg
Largest · last 90 days
€825.0M
Uber Technologies Inc. · The Netherlands
Most active authority
116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
reset
Date ↓ Company / party Authority Articles Fine
2025-03-07 Police Officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Württemberg Art. 5Art. 6 €3,500
2024-11-12 Debt collection service provider
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hamburg Art. 5Art. 6 €900,000
2024-01-01 Company
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6Art. 12Art. 15 €496,000
2024-01-01 Doctor´s Office
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6Art. 9 €3,700
2024-01-01 Doctor´s Office
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6Art. 9 €3,300
2024-01-01 Doctor´s Office
Insufficient technical and organisational measures to ensure information security
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6Art. 9Art. 32 €2,500
2023-05-31 Deutsche Kreditbank
Insufficient fulfilment of data subjects rights
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 15Art. 22 €300,000
2023-01-01 Physician
Insufficient technical and organisational measures to ensure information security
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 32 €3,600
2023-01-01 Pizza delivery service
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 5 —
2022-03-03 BREBAU GmbH
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 5Art. 6Art. 9 €1,900,000
2022-01-01 Pharmacy
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 5 €6,500
2022-01-01 Covid-19 test center
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €1,800
2022-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6 —
2022-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6 —
2022-01-01 Physician
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Nordrhein-Westfalen Art. 5Art. 6Art. 9 —
2022-01-01 Company
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bremen Art. 5 —
2022-01-01 Sports photography company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6 —
2022-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6 —
2022-01-01 Restaurant operator
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 5Art. 6 —
2022-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Hamburg Art. 5Art. 6 —
2022-01-01 Restaurant operator
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6 —
2021-03-10 VfB Stuttgart 1893 AG
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 5 €300,000
2021-03-03 Private Individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Sachsen-Anhalt Art. 5Art. 32 €0
2021-02-23 Deutsche Wohnen SE
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 25 €0
2021-01-08 notebooksbilliger.de
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Niedersachsen Art. 5Art. 6 €10,400,000