▲ Enforcement Tracker

3,609 GDPR enforcement decisions from 59 countries, updated daily.

Total fines · last 12 months

€1.4B

+896% vs previous year

Decisions · last 12 months

534

45 per month avg

Largest · last 90 days

€5.8M

Garante per la protezione dei dati personali (Italy) · Italy

Most active authority

Spanish Data Protection Authority (aepd)

84 decisions · SPAIN

Monthly fine totals · last 12 months

SepOctNovDecJanFebMarAprMayJunJulAug

Date ↓	Company / party	Authority	Articles	Fine
2026-02-26	Istituto Tecnico Statale “Luigi Einaudi” di Correggio Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2026-02-26	Ciemme S.r.l.s. Insufficient cooperation with supervisory authority	🇮🇹 Italian Data Protection Authority (Garante)	Art. 58	€1,000
2026-02-23	Reddit, Inc. Non-compliance with general data processing principles	🇬🇧 Information Commissioner (ICO)	Art. 5 Art. 6 Art. 8 Art. 35	€16,610,000
2026-02-20	University of Szeged Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 13	€5,570
2026-02-20	KEAT - Centre for Education & Rehabilitation of the Blind Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 15	€5,000
2026-02-20	SC Hayat Dent SRL Insufficient cooperation with supervisory authority	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 83	€2,000
2026-02-19	Restaurant Partner Polska Insufficient legal basis for data processing	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€1,393,300
2026-02-19	Your Consulting SRL Insufficient technical and organisational measures to ensure information security	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 25 Art. 32	€3,000
2026-02-16	Slovenia DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security	🇸🇮 Slovenian Supervisory Authority (Informacijski pooblaščenec)	Art. 32	€5,500
2026-02-13	Election Committee of Karol Nawrocki Insufficient legal basis for data processing	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6	€8,470
2026-02-12	Sportitalia Società Sportiva Dilettantistica a.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 17	€30,000
2026-02-12	Depurazione Acqua S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 4 Art. 5 Art. 6 Art. 7	€15,000
2026-02-12	Lex Iuris S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 6 Art. 15	€15,000
2026-02-12	Bressanelli Galli Gelpi Porta & C. S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2026-02-12	Based s.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€12,000
2026-02-12	Comune di Coccaglio Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€6,000
2026-02-12	Unleadmited S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 24	€5,000
2026-02-12	Order of Physicians, Surgeons and Dentists of the Province of Macerata Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2026-02-12	Comune di Mazara del Vallo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€4,000
2026-02-12	Comune di Velletri Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2026-02-12	Comune di Monterotondo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 88	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25	€1,500
2026-02-12	Sole Trader Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€1,000
2026-02-11	AEPD (Spain) - EXP202306354 (PS/00312/2024)	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 61 Art. 6	€150,000

← previous 151–175 of 3,609 next →