Skip to content

▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
631
53 per month avg
Largest · last 90 days
€825.0M
Uber Technologies Inc. · The Netherlands
Most active authority
116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
reset
Date ↓ Company / party Authority Articles Fine
2020-09-25 Odin Flissenter AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6 €13,900
2020-09-03 Bergen Municipality
Insufficient technical and organisational measures to ensure information security
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 32 €276,000
2020-07-02 Odin Flissenter AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6 —
2020-06-19 Aquateknikk AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6 —
2020-02-28 Coop Finnmark SA
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6 —
2020-02-26 Rælingen Municipality
Insufficient technical and organisational measures to ensure information security
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 32 —
2019-03-01 Bergen Municipality
Insufficient technical and organisational measures to ensure information security
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 32 €170,000
2017-11-08 Norwegian DPA: Legelisten.no may process healthcare reviews without prior consent 🇳🇴 Datatilsynet (Norway) Art. 411Art. 4Art. 51Art. 5 —