▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2025-04-02	Hospital Non-compliance with general data processing principles	🇲🇹 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 14 Art. 16	€20,000
2023-01-01	MALTA DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 6	€5,000
2023-01-01	MALTA DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 12 Art. 13 Art. 14	€2,500
2022-01-17	C-Planet (IT Solutions) Limited Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 9 Art. 14	€65,000
2022-01-01	MALTA DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 9 Art. 32	€65,000
2020-01-01	MALTA DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 32	€5,000
2020-01-01	MALTA DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 32	€2,500
2019-02-18	Lands Authority Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 32	€5,000