▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-06-01	Elkjøp AS Insufficient legal basis for data processing	🇳🇴 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12	€1,820,000
2023-11-27	Norwegian Labor and Welfare Administration Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 24 Art. 25 Art. 32	€1,700,000
2023-02-06	Sats ASA Insufficient fulfilment of data subjects rights	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12 Art. 13	€900,000
2022-03-04	Norwegian Parliament Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 32	€195,000
2022-02-02	Lillestrøm Municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 32	€30,000
2021-11-24	Norwegian State Pension Fund (SPK) Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 9	€98,000
2021-10-18	Østre Toten municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 32	€412,000
2021-09-27	Ferde AS Non-compliance with general data processing principles	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 28 Art. 32 Art. 44	€496,000
2021-08-12	Waxing Palace AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 13	€9,600
2021-06-22	NORWAY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 13 Art. 17	€24,800
2021-05-20	Municipality of Oslo Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€39,000
2021-05-18	Innovasjon Norge Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€95,500
2021-05-05	Disqus Inc. Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12 Art. 13	—
2021-04-09	Miljø- og Kvalitetsledelse AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€3,400
2021-03-21	Basaren Drift AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 13	€19,900
2021-03-15	Asker Municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 32 Art. 24	€100,000
2021-03-08	Dragefossen AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€14,900
2021-03-02	NORWAY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€24,400
2021-02-03	Cyberbook AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€19,300
2021-01-19	Aquateknikk AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€9,700
2021-01-14	Coop Finnmark SA Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€38,600
2021-01-12	NORWAY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€38,600
2021-01-07	Gveik AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€7,250
2021-01-06	Lindstrand Trading AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€9,700
2021-01-04	Innovasjon Norge Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€95,500

1–25 of 33 next →