GDPR fines
across Europe
A complete database of GDPR fines issued by European data protection authorities. Filter by country, year and industry, and consult each official decision.
3,121
fines recorded
6,12 Md€
cumulative amount
32
countries covered
2018→2026
years covered
Non-exhaustive list
Not all decisions are made public by supervisory authorities. This database only consolidates the decisions publicly disclosed by European regulators.
Key figures on GDPR fines in Europe
Across the 3,121 GDPR fines recorded since 2018 (data: April 2026): a cumulative amount of 6,12 Md€, an average fine of 2,1 M€ and a maximum fine of 1,20 Md€ (Meta Platforms Ireland Limited). The most-sanctioned sector is "Industry and commerce" and the most frequent breach is "Insufficient legal basis for processing".
2,1 M€
Average fine
1,20 Md€
Largest single fine
Industry and commerce
Most-sanctioned sector
Spain
Most active country
Cartographie des amendes RGPD
Europe · cumul par pays
Cliquez sur une pastille pour filtrer la liste. Rayon proportionnel au cumul d'amendes connues.
2,822 results
Cumulative amount: 6,08 Md€
- 23 Apr 2026
Belgium · 23 Apr 2026Accountancy Firm
Employment and HR
Insufficient legal basis for processing9 k€
Belgium - 15 Apr 2026
Slovenia · 15 Apr 2026Utility Company
Industry and commerce
Insufficient legal basis for processing7 k€
Slovenia - 07 Apr 2026
Poland · 07 Apr 2026Housing Associaction
Real estate
Failure to notify a data breach2 k€
Poland - 27 Mar 2026
Slovenia · 27 Mar 2026Legal Person
Unassigned
Insufficient technical and organisational measures13 k€
Slovenia - 25 Mar 2026
Romania · 25 Mar 2026RENAULT COMMERCIAL ROUMANIE S.R.L.
Industry and commerce
Insufficient technical and organisational measures125 k€
Romania - 23 Mar 2026
Romania · 23 Mar 2026ING Bank NV Amsterdam – Sucursala București S.A.
Finance, insurance and consulting
Insufficient technical and organisational measures4 k€
Romania - 20 Mar 2026
Romania · 20 Mar 2026Public and Private Domain SA
Employment and HR
Insufficient legal basis for processing3 k€
Romania - 05 Mar 2026
Romania · 05 Mar 2026Altex Romania S.R.L.
Industry and commerce
Insufficient cooperation with the supervisory authority8 k€
Romania - 02 Mar 2026
Spain · 02 Mar 2026MALAGASUITE SHOWROOM, S.L.
Hospitality and catering
Data subject rights not respected2 k€
Spain - 02 Mar 2026
Spain · 02 Mar 2026ORNITOLÓGICA DE ANDALUCÍA FOA
Individuals and associations
Non-compliance with processing principles900 €
Spain - 02 Mar 2026
Finland · 02 Mar 2026Suomen Numerokeskus Oy
Industry and commerce
Data subject rights not respected5 k€
Finland - 01 Mar 2026
Spain · 01 Mar 2026Unknown
Industry and commerce
Non-compliance with processing principles1 k€
Spain - 01 Mar 2026
Spain · 01 Mar 2026HOLY MARY CATHOLIC SCHOOL, S.L.
Public sector and education
Insufficient legal basis for processing12 k€
Spain - 26 Feb 2026
Italy · 26 Feb 2026Ciemme S.r.l.s.
Industry and commerce
Insufficient cooperation with the supervisory authority1 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Conservatory
Public sector and education
Insufficient legal basis for processing5 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Ministero delle Imprese e del Made in Italy
Public sector and education
Insufficient legal basis for processing15 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Depac Società Cooperativa Sociale a r.l.
Employment and HR
Insufficient legal basis for processing15 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Flamel S.r.l.
Industry and commerce
Non-compliance with processing principles15 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Ministero delle Imprese e del Made in Italy
Public sector and education
Insufficient processor agreement15 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Istituto Tecnico Statale “Luigi Einaudi” di Correggio
Employment and HR
Insufficient legal basis for processing2 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Ministero dell’Economia e delle Finanze
Public sector and education
Insufficient legal basis for processing12 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Groupharma s.r.l.s.
Employment and HR
Data subject rights not respected3 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Radio Immagine Uno S.r.l.
Media, telecoms and broadcasting
Data subject rights not respected10 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026Dedalus Italia S.p.A.
Industry and commerce
Insufficient technical and organisational measures32 k€
Italy - 26 Feb 2026
Italy · 26 Feb 2026S.M. Trattamento Acqua di XX
Industry and commerce
Insufficient legal basis for processing30 k€
Italy - 23 Feb 2026
United Kingdom · 23 Feb 2026Reddit, Inc.
Media, telecoms and broadcasting
Non-compliance with processing principles16,6 M€
United Kingdom - 20 Feb 2026
Romania · 20 Feb 2026SC Hayat Dent SRL
Healthcare
Insufficient cooperation with the supervisory authority2 k€
Romania - 19 Feb 2026
Romania · 19 Feb 2026Your Consulting SRL
Industry and commerce
Insufficient technical and organisational measures3 k€
Romania - 19 Feb 2026
Poland · 19 Feb 2026Restaurant Partner Polska
Industry and commerce
Insufficient legal basis for processing1,4 M€
Poland - 16 Feb 2026
Slovenia · 16 Feb 2026Unknown
Unassigned
Insufficient technical and organisational measures6 k€
Slovenia - 13 Feb 2026
Poland · 13 Feb 2026Election Committee of Karol Nawrocki
Individuals and associations
Insufficient legal basis for processing8 k€
Poland - 12 Feb 2026
Italy · 12 Feb 2026Comune di Velletri
Public sector and education
Non-compliance with processing principles2 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Comune di Coccaglio
Employment and HR
Non-compliance with processing principles6 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Order of Physicians, Surgeons and Dentists of the Province of Macerata
Public sector and education
Insufficient legal basis for processing4 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Comune di Monterotondo
Public sector and education
Insufficient legal basis for processing2 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Sole Trader
Hospitality and catering
Insufficient legal basis for processing2 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Based s.r.l.
Employment and HR
Data subject rights not respected12 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Unleadmited S.r.l.
Media, telecoms and broadcasting
Insufficient legal basis for processing5 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Depurazione Acqua S.r.l.
Industry and commerce
Insufficient legal basis for processing15 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Bressanelli Galli Gelpi Porta & C. S.r.l.
Finance, insurance and consulting
Insufficient legal basis for processing15 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Comune di Mazara del Vallo
Public sector and education
Insufficient legal basis for processing4 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Sole Trader
Individuals and associations
Insufficient information obligations1 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Sportitalia Società Sportiva Dilettantistica a.r.l.
Industry and commerce
Data subject rights not respected30 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Lex Iuris S.r.l.
Public sector and education
Insufficient legal basis for processing15 k€
Italy - 12 Feb 2026
Italy · 12 Feb 2026Sole Trader
Hospitality and catering
Insufficient legal basis for processing2 k€
Italy - 11 Feb 2026
Greece · 11 Feb 2026Vodafone – PANAFON A.E.E.T.
Media, telecoms and broadcasting
Data subject rights not respected30 k€
Greece - 10 Feb 2026
Poland · 10 Feb 2026Fundację Lumus
Individuals and associations
Non-compliance with processing principles5 k€
Poland - 06 Feb 2026
Spain · 06 Feb 2026Landlord
Hospitality and catering
Insufficient legal basis for processing2 k€
Spain - 05 Feb 2026
Romania · 05 Feb 2026Tensa Art Design S.A
Industry and commerce
Insufficient cooperation with the supervisory authority20 k€
Romania - 05 Feb 2026
Poland · 05 Feb 2026DPD Polska sp. z o.o.
Transport and energy
Insufficient processor agreement2,7 M€
Poland
Sources: public decisions from European supervisory authorities (CNIL, DPC, AEPD, Garante, AP, BfDI, ICO…). For the official version of each decision, please refer directly to the authority cited in the fine record.
Secure your compliance with Data Comply One
Our platform and our experts (DPO · CISO) help you steer your GDPR, AI Act, NIS 2 and DORA compliance — calmly, at your own pace.