▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2025-04-15	Funeral Home Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5	€7,800
2025-03-17	Minister of Digital Affairs Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€23,500
2024-11-20	POLAND DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 28 Art. 32	€358,000
2024-05-20	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 32	€336,000
2024-04-24	Committee Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€2,500
2024-01-17	Centrum Medyczne Ujastek Sp. z o.o. Non-compliance with general data processing principles	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6 Art. 9 Art. 13	€273,000
2023-07-18	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€3,400
2023-05-31	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32 Art. 33	€10,600
2023-05-16	Municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€6,700
2023-05-05	Municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€2,200
2023-04-20	Disciplinary officer Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€5,400
2023-02-08	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€7,200
2023-02-07	Housing association Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 28 Art. 33 Art. 34	€321
2023-01-19	Szczecin-Centrum District Court Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€6,400
2022-11-30	PIONIER (law firm) Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6 Art. 9	€9,600
2022-11-02	Mayor Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€1,700
2022-05-31	Stołeczny Ośrodek dla Osób Nietrzeźwych Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€2,100
2022-01-19	Fortum Marketing and Sales Polska S.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 28	€1,000,000
2021-12-09	Warsaw University of Technology Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 25 Art. 32	€10,000
2021-08-13	President of the Zgierz District Court Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€2,200
2021-02-11	Krajowa Szkoła Sądownictwa i Prokuratury Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 28 Art. 32	€22,200
2020-12-17	ID Finance Poland Sp. z o.o. Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€235,300
2020-12-14	Virgin Mobile Polska Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 25 Art. 32	€443,000
2020-08-31	Surveyor General of Poland ('GKK') Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€22,700
2020-03-04	School in Gdansk (Danzig) (fine imposed against town of Gdansk) Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 9	€0

← previous 26–50 of 52 next →