▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

631

53 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2026-11-17	AEPD: DGT violated Art. 5(1)(c) GDPR by transmitting unnecessary data via app's push	🇪🇸 AEPD (Spain)	Art. 51 Art. 5	—
2026-10-06	AEPD: RFEF must not require minor's school certificate alongside residence proof	🇪🇸 AEPD (Spain)	Art. 51 Art. 5	€100,000
2026-09-23	AEPD sanctions Vodafone España for inadequate Super WiFi processor agreement and oversight	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 28 Art. 32	€750,000
2026-09-23	AEPD warns controller on GDPR data protection by design for AI recruitment screening tool	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 12 Art. 13	—
2026-09-16	AEPD fines DIGI Telecom for issuing duplicate SIM to impersonator without consent	🇪🇸 AEPD (Spain)	Art. 52 Art. 5 Art. 61 Art. 6	€140,000
2026-09-16	AEPD fines El Español for publishing video of minor assailant without anonymization	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 52 Art. 25	€20,000
2026-09-16	AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber	🇪🇸 AEPD (Spain)	Art. 411 Art. 4 Art. 52 Art. 5	€10,000
2026-09-15	APDCAT: Public body violated GDPR by disclosing audio recording to four extra recipients	🇪🇸 APDCAT (Catalonia)	Art. 51 Art. 5 Art. 6 Art. 12	€3,150
2026-09-15	AEPD: Data subject entitled to identity of professionals who accessed medical records	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 52 Art. 12	—
2026-09-08	AEPD (Spain) - ps-0035-2025	🇪🇸 AEPD (Spain)	Art. 51 Art. 5	€160
2026-09-02	AEPD: Canals City Council breached Art. 5(1)(f) GDPR by discarding exam papers unshredded	🇪🇸 AEPD (Spain)	Art. 51 Art. 5	—
2026-07-17	AEPD (Spain) - EXP202103746	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 12 Art. 15	—
2026-07-17	APDCAT sanctions Madremanya City Council for inadequate redaction of sensitive data in	🇪🇸 APDCAT (Catalonia)	Art. 51 Art. 5 Art. 51 Art. 31	—
2026-07-16	AEPD (Spain) - PS-00020-2025	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 35 Art. 582	€200,000
2026-07-16	AEPD (Spain) - EXP202102529	🇪🇸 AEPD (Spain)	Art. 415 Art. 4 Art. 51 Art. 5	—
2026-04-28	Posada del León de Oro Non-compliance with general data processing principles	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13	€240
2026-04-22	KONECTA BTO, S.L. Insufficient technical and organisational measures to ensure information security	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€300,000
2026-04-15	CAIXABANK, S.A. Insufficient technical and organisational measures to ensure information security	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5 Art. 25	€400,000
2026-03-20	ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L. Insufficient technical and organisational measures to ensure information security	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€150,000
2026-03-11	IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA Insufficient technical and organisational measures to ensure information security	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€650,000
2026-03-10	CUMACA MOTOR, S.L. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€6,000
2026-03-04	ARES CAPITAL, S.A. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 13	€200,000
2026-03-02	ORNITOLÓGICA DE ANDALUCÍA FOA Non-compliance with general data processing principles	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€900
2026-03-01	HOLY MARY CATHOLIC SCHOOL, S.L. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 35	€12,000
2026-03-01	Spain DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5	€1,000

1–25 of 570 next →