▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
631
53 per month avg
Largest · last 90 days
€825.0M
Uber Technologies Inc. · The Netherlands
Most active authority
Italian Data Protection Authority (Garante)
116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
reset
Date ↓ Company / party Authority Articles Fine
2021-03-23 Irish Credit Bureau DAC
Insufficient technical and organisational measures to ensure information security
 🇪🇺 Data Protection Authority of Ireland Art. 5Art. 24Art. 25 €90,000
2020-12-17 University College Dublin
Insufficient technical and organisational measures to ensure information security
 🇪🇺 Data Protection Authority of Ireland Art. 5Art. 32Art. 33 €70,000
2020-08-18 Cork University Maternity Hospital
Insufficient technical and organisational measures to ensure information security
 🇪🇺 Data Protection Authority of Ireland Art. 5Art. 32 €65,000
2020-05-17 Tusla Child and Family Agency
Insufficient legal basis for data processing
 🇪🇺 Data Protection Authority of Ireland Art. 5Art. 6 €75,000