Skip to content

Enforcement Tracker

3,488 GDPR enforcement decisions from 52 countries, updated daily.

Total fines · last 12 months
€1.3B
+879% vs previous year
Decisions · last 12 months
550
46 per month avg
Largest · last 90 days
€6.6M
Most active authority
112 decisions · SPAIN

Monthly fine totals · last 12 months

AugSepOctNovDecJanFebMarAprMayJunJul
Date ↓ Company / party Authority Articles Fine
2023-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bavaria
2023-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bavaria
2023-01-01 Fishing club
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2023-01-01 Supermarket
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6Art. 9
2023-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bavaria
2023-01-01 Store detective
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bavaria
2023-01-01 Physician
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Bavaria
2022-12-30 A&G Couriers Limited T/A Fastway Couriers (Ireland)
Insufficient technical and organisational measures to ensure information security
🇪🇺 Data Protection Authority of Ireland Art. 32 €15,000
2022-12-30 Company
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 58 €6,300
2022-12-29 SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €24,000
2022-12-29 ADENET SYSTEMS, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €3,000
2022-12-28 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €100,000
2022-12-28 Homeowners Association
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 15 €2,000
2022-12-28 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-12-28 Homeowners Association
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €600
2022-12-28 MAE WEST SYSTEMS, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €400
2022-12-28 Homeowners Association
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2022-12-28 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2022-12-27 Company
Insufficient legal basis for data processing
🇪🇺 Deputy Data Protection Ombudsman Art. 9 €122,000
2022-12-27 Kaufland Romania SCS
Insufficient technical and organisational measures to ensure information security
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 29Art. 32 €3,000
2022-12-22 VIEC Limited
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Ireland Art. 5Art. 32 €100,000
2022-12-22 SUDREZIDENȚIAL Broker S.R.L.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 32 €10,000
2022-12-21 Hotel
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12Art. 13 €8,000
2022-12-20 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2022-12-20 Property owner administrative board
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €2,000