▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-10-01	ANSPDCP (Romania) - TIP TOP FOOD INDUSTRY SRL	🇷🇴 ANSPDCP (Romania)	Art. 51 Art. 5 Art. 9	—
2026-09-25	Tip Top Food Industry S.R.L. Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 9	€5,000
2026-08-18	ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.	🇷🇴 ANSPDCP (Romania)	Art. 51 Art. 5 Art. 9 Art. 324	—
2026-08-06	AMATO BESTSELLER S.R.L Non-compliance with general data processing principles	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 32 Art. 14 Art. 5 Art. 9	€45,000
2026-04-28	Crowd Entertainment Ltd Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5	€35,000
2026-03-20	Public and Private Domain SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-03-20	Domeniul Public și Privat SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2026-01-19	Continental Automotive Products SRL Insufficient technical and organisational measures to ensure information security	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 32	€15,000
2026-01-19	Continental Automotive Products SRL Insufficient technical and organisational measures to ensure information security	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 32	€15,000
2025-12-29	Order of General Nurses, Midwives and Medical Assistants of Romania – Neamt Branch Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2025-12-29	Order of General Nurses, Midwives and Medical Assistants of Romania – Neamt Branch Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2025-11-12	Fan Courier Express S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€4,000
2025-11-12	Fan Courier Express S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€4,000
2025-06-26	Alliance for the Union of Romanians Party Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 25 Art. 32	€25,000
2025-06-26	Alliance for the Union of Romanians Party Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 25 Art. 32	€25,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-05-22	MP Dumitru Viorel Focșa Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€1,000
2025-05-22	MP Dumitru Viorel Focșa Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€1,000
2025-05-13	Romoffice Construct Holding Ag SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€2,000
2025-05-13	Romoffice Construct Holding Ag SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€2,000
2025-05-09	ROUMASPORT SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€5,000
2025-05-09	ROUMASPORT SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€5,000
2025-04-03	Banca Transilvania S.A. Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€5,000

1–25 of 70 next →