▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-06-19	VDAI fines medical company €450,000 for inadequate security measures in data breaches	🇱🇹 VDAI (Lithuania)	Art. 51 Art. 5 Art. 241 Art. 24	€450,000
2026-06-19	InMedica UAB Insufficient technical and organisational measures to ensure information security	🇱🇹 Lithuanian Data Protection Authority (VDAI)	Art. 24 Art. 32 Art. 5	€450,000
2026-06-05	Reda Naujokaitienė Insufficient legal basis for data processing	🇱🇹 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 6 Art. 9	€1,153
2025-01-21	Employment Service under the Ministry of Social Security and Labor of the Republic of Lithuania Insufficient technical and organisational measures to ensure information security	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 24 Art. 32	€9,000
2024-10-18	Vilnius District Municipality Administration Insufficient technical and organisational measures to ensure information security	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 32 Art. 34	€9,000
2024-07-02	Vinted Insufficient fulfilment of data subjects rights	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 12	€2,385,276
2024-01-01	Company Insufficient fulfilment of data subjects rights	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 15 Art. 16	€12,000
2023-04-20	Company Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 32	€20,000
2023-01-24	Company Insufficient fulfilment of data subjects rights	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 15	€8,000
2023-01-09	Praktiškas UAB Insufficient legal basis for data processing	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 9 Art. 13 Art. 30	€6,000
2021-06-21	UAB VS FITNESS Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 9 Art. 13 Art. 30	€20,000
2021-02-26	Nacionaliniam visuomenės sveikatos centrui (NVSC) Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 13 Art. 24 Art. 32	€12,000
2021-02-26	IT sprendimai sėkmei Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 13 Art. 24 Art. 32	€3,000
2020-10-21	Vilnius City Municipality Administration Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5	€15,000
2020-01-01	LITHUANIA DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 13 Art. 24 Art. 35	€8,000
2019-05-16	Payment service provider UAB MisterTango Insufficient fulfilment of data breach notification obligations	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 32 Art. 33	€61,500