▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

633

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-06-13	Sole trader providing accounting and tax advisory services Insufficient technical and organisational measures to ensure information security	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€2,760
2026-06-13	UODO fines accounting firm €2,760 for email breach security failures	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 52 Art. 241	€2,760
2026-06-11	UODO reprimands hospital for inadequate processor oversight and email security failures	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 52 Art. 241	—
2026-05-25	District Governor of Lubartów Insufficient technical and organisational measures to ensure information security	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 28 Art. 32	€4,958
2026-05-22	UODO (Poland) - DKE.561.4.2026	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 52	—
2026-05-19	Social welfare centre Insufficient technical and organisational measures to ensure information security	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32 Art. 33	€7,950
2026-05-19	UODO (Poland) - DKN.5131.27.2023	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 52 Art. 241	—
2026-05-18	UODO reprimands mayor for disclosing data subject's data to company without legal basis	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 51 Art. 61	—
2026-04-13	UODO reprimands electricity seller for Art. 5, 24, 25, 28, 32 GDPR violations over	🇵🇱 UODO (Poland)	Art. 51 Art. 5 Art. 52 Art. 241	€2,415
2026-02-19	Restaurant Partner Polska Insufficient legal basis for data processing	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€1,393,300
2026-02-13	Election Committee of Karol Nawrocki Insufficient legal basis for data processing	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€8,470
2026-02-05	DPD Polska sp. z o.o. Insufficient data processing agreement	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 29 Art. 32	€2,682,000
2025-11-15	Powiatowego Inspektora Sanitarnego w Policach Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€4,750
2025-11-15	Powiatowego Inspektora Sanitarnego w Policach Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€4,750
2025-08-26	ING Bank Śląski Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€4,323,250
2025-08-26	ING Bank Śląski Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€4,323,250
2025-08-04	Non-Public Health Care Institution Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€7,700
2025-08-04	Non-Public Health Care Institution Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€7,700
2025-07-21	McDonald’s Polska Sp. z o.o. Non-compliance with general data processing principles	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 28 Art. 38	€3,955,000
2025-07-21	McDonald’s Polska Sp. z o.o. Non-compliance with general data processing principles	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 28 Art. 38	€3,955,000
2025-07-21	24/7 Communication Sp. z o.o. Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 38	€43,000
2025-07-21	24/7 Communication Sp. z o.o. Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 38	€43,000
2025-06-30	L. Zamenhof University Children's Clinical Hospital in Białystok Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 32	€15,600
2025-06-30	L. Zamenhof University Children's Clinical Hospital in Białystok Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 32	€15,600
2025-04-15	Funeral Home Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5	€7,800

1–25 of 52 next →