▲ Enforcement Tracker

3,786 GDPR enforcement decisions from 64 countries, updated daily.

Total fines · last 12 months

€202.5B

+18230% vs previous year

Decisions · last 12 months

611

51 per month avg

Largest · last 90 days

€200.0B

HDPA (Greece) · Greece

Most active authority

Italian Data Protection Authority (Garante)

114 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

Date ↓	Company / party	Authority	Articles	Fine
2026-08-03	AZOP (Croatia) - Decision 08-03-2022 (energy company)	🇭🇷 AZOP (Croatia)	Art. 153 Art. 15	€940,000
2026-07-31	HOMELUX S.R.L Non-compliance with general data processing principles	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 32	€15,000
2026-07-29	ANSPDCP (Romania) - Fine against Orange Romania SA of July 17, 2026	🇷🇴 ANSPDCP (Romania)	Art. 251 Art. 25 Art. 321 Art. 32	€523,900
2026-07-28	HDPA (Greece) - 15/2026	🇬🇷 HDPA (Greece)	Art. 51 Art. 5 Art. 283 Art. 28	€200,000,150,000
2026-07-24	AEPD (Spain) - PS/00421/2020	🇪🇸 AEPD (Spain)	Art. 21	€5,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-24	ANSPDCP (Romania) - Fine against There's an AI for that S.R.L	🇷🇴 ANSPDCP (Romania)	Art. 4	€30
2026-07-24	HmbBfDI (Hamburg) - Einstellung Gerichtsverfahren in Sachen Videmo 360	🇩🇪 HmbBfDI (Hamburg)		—
2026-07-23	TIM S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 15	€9,516,000
2026-07-23	Garante per la protezione dei dati personali (Italy) - 556/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 52 Art. 5 Art. 24 Art. 28	€9,516,000
2026-07-23	Emiglia-Romagna Regional Employment Agency Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€30,000
2026-07-23	Monza and Brianza Local Education Authority Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€10,000
2026-07-23	Bologna University Hospital IRCCS Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€10,000
2026-07-23	Municipality of Terralba Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 24 Art. 25	€8,000
2026-07-23	Top Secrert Investigazioni e sicurezza s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€6,500
2026-07-23	Ancel Keys Comprehensive School Castelnuovo Cilento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-07-23	Garante per la protezione dei dati personali (Italy) - 577/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 25	—
2026-07-22	NAIH (Hungary) - NAIH-11443-3/2026	🇭🇺 NAIH (Hungary)	Art. 121 Art. 12 Art. 131 Art. 13	€2,000,000
2026-07-22	Finnish DPA: requesting address, ID number and strong authentication for access request	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 51 Art. 5 Art. 122 Art. 12	—
2026-07-21	Hôpital privé de la Loire Insufficient technical and organisational measures to ensure information security	🇫🇷 French Data Protection Authority (CNIL)	Art. 32 Art. 34	€500,000
2026-07-21	CNIL fines EXTIA for failing to properly handle job applicant erasure requests	🇫🇷 CNIL (France)	Art. 12 Art. 17	€300,000
2026-07-21	AEPD (Spain) - PS-00159-2025	🇪🇸 AEPD (Spain)	Art. 14 Art. 15	€90,000
2026-07-20	Garante per la protezione dei dati personali (Italy) - 10254256	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 49 Art. 4 Art. 410 Art. 415	€12,000
2026-07-18	Garante per la protezione dei dati personali (Italy) - 471/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 51 Art. 51 Art. 6	€20,000
2026-07-17	CNIL (France) - SAN-2022-011	🇫🇷 CNIL (France)	Art. 12 Art. 14 Art. 15 Art. 21	€1,000,000

← previous 76–100 of 3,786 next →