Skip to content

▲ Enforcement Tracker

3,788 GDPR enforcement decisions from 64 countries, updated daily.

Total fines · last 12 months
€202.5B
+18231% vs previous year
Decisions · last 12 months
612
51 per month avg
Largest · last 90 days
€200.0B
HDPA (Greece) · Greece
Most active authority
114 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
Date ↓ Company / party Authority Articles Fine
2026-07-17 BfDI (Germany) - 4/2021 🇩🇪 BfDI (Germany) —
2026-07-17 AEPD (Spain) - EXP202103746 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 12Art. 15 —
2026-07-17 APDCAT sanctions Madremanya City Council for inadequate redaction of sensitive data in 🇪🇸 APDCAT (Catalonia) Art. 51Art. 5Art. 51Art. 31 —
2026-07-16 AEPD (Spain) - PS-00020-2025 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 35Art. 582 €200,000
2026-07-16 Garante per la protezione dei dati personali (Italy) - 10128005 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 51 €50,000
2026-07-16 Garante per la protezione dei dati personali (Italy) - 10192784 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 1Art. 51Art. 5Art. 51 €16,000
2026-07-16 AEPD (Spain) - EXP202102529 🇪🇸 AEPD (Spain) Art. 415Art. 4Art. 51Art. 5 —
2026-07-15 AEPD (Spain) - E/03783/2020 🇪🇸 AEPD (Spain) Art. 2 —
2026-07-14 Garante fines Lusha Systems Inc. over unauthorized B2B contact database 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 32Art. 3Art. 32Art. 51 €2,000,000
2026-07-14 NIER Ingeriegna S.p.A. SB
Insufficient technical and organisational measures to ensure information security
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 32 €120,000
2026-07-14 Municipality of Rieti
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 24Art. 25 €6,000
2026-07-14 La Terrazza
Insufficient fulfilment of information obligations
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 13 €700
2026-07-09 ANSPDCP (Romania) - Fine against Ascendex Technology SRL 🇷🇴 ANSPDCP (Romania) Art. 423Art. 4Art. 121Art. 12 €57,839
2026-07-08 IP (Slovenia) - 0609-36/2026/7 🇸🇮 IP (Slovenia) Art. 32 €1,198
2026-07-03 Hera Comm S.p.A.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €5,800,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 483/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 13Art. 14 €5,800,000
2026-07-03 EstEnergy S.p.A.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €1,400,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 484/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 51 €1,400,000
2026-07-03 Cerved Group S.p.A.
Insufficient fulfilment of data subjects rights
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 15 €400,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 487/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 32Art. 3Art. 52Art. 5 €158,000
2026-07-03 Character Technologies Inc.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €158,000
2026-07-03 Experian Italia S.p.A.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 15Art. 25 €120,000
2026-07-03 ANSPDCP (Romania) - 02/07/2026 🇷🇴 ANSPDCP (Romania) Art. 321Art. 32Art. 322Art. 324 €26,172
2026-07-03 Società Editoriale Il Fatto S.p.A.
Insufficient legal basis for data processing
🇮🇹 Italian Data Protection Authority (Garante) Art. 5 €23,750
2026-07-03 University of Pisa
Insufficient technical and organisational measures to ensure information security
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 25Art. 32 €15,000