Submit a new fine
×
Want to share with us a fine which we have not yet included in the list? Feel free to submit it here.
Please note that we only list GDPR fines, i.e. no fines imposed under (1) national / non-European laws, (2) non-data protection laws (e.g. competition laws / electronic communication laws) and (3) "old" pre-GDPR-laws.
. Adding a link to the source of the fine is mandatory, all other details support us in adding the fine to the database as quick as possible.
Thank you for your input!
Fines Database
Fine Models by DPAs
Germany
Netherlands
Fines Statistics
[x] Remove all filters
Filter by country:
Filter by violation (Art.):
All
5
6
7
9
12
13
14
15
17
18
21
24
25
28
29
31
32
33
34
35
36
37
58
83
Chronological statistic
Highest fines: by country
Highest fines: by type of violation
Highest fines: by sectors
Highest fines: individual
Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated
up to each month
. The second overview contains the sum and number of fines
per month
.
Note: Only fines with valid information about year and month that are already included in our database are taken into account.
1. Course of overall sum and number of fines (cumulative):
a) Course of overall sum of fines (cumulative):
b) Course of overall number of fines (cumulative):
Month
Sum of Fines (up to month)
Number of Fines (up to month)
Jul 2018
€ 400,000
1
Sep 2018
€ 400,300
2
Oct 2018
€ 400,688
3
Nov 2018
€ 420,688
4
Dec 2018
€ 436,388
9
Jan 2019
€ 50,437,276
12
Feb 2019
€ 50,502,384
24
Mar 2019
€ 50,964,684
32
Apr 2019
€ 51,273,819
40
May 2019
€ 51,833,345
48
Jun 2019
€ 52,917,895
57
Jul 2019
€ 163,675,670
64
Aug 2019
€ 166,928,505
73
Sep 2019
€ 167,835,028
82
Oct 2019
€ 202,347,402
111
Nov 2019
€ 203,462,202
131
Dec 2019
€ 225,219,732
154
Jan 2020
€ 253,335,892
170
Feb 2020
€ 254,221,982
199
Mar 2020
€ 262,095,582
235
Apr 2020
€ 262,897,782
242
May 2020
€ 263,381,182
253
Jun 2020
€ 265,429,490
284
Jul 2020
€ 285,464,038
330
Aug 2020
€ 285,941,986
351
Sep 2020
€ 286,685,886
372
Oct 2020
€ 344,156,494
388
2. Sum and number of fines per month (non-cumulative):
a) Sum of fines per month (non-cumulative):
b) Number of fines per month (non-cumulative):
Month
Sum of Fines (in month)
Number of Fines (in month)
Jul 2018
€ 400,000
1
Sep 2018
€ 300
1
Oct 2018
€ 388
1
Nov 2018
€ 20,000
1
Dec 2018
€ 15,700
5
Jan 2019
€ 50,000,888
3
Feb 2019
€ 65,108
12
Mar 2019
€ 462,300
8
Apr 2019
€ 309,135
8
May 2019
€ 559,526
8
Jun 2019
€ 1,084,550
9
Jul 2019
€ 110,757,775
7
Aug 2019
€ 3,252,835
9
Sep 2019
€ 906,523
9
Oct 2019
€ 34,512,374
29
Nov 2019
€ 1,114,800
20
Dec 2019
€ 21,757,530
23
Jan 2020
€ 28,116,160
16
Feb 2020
€ 886,090
29
Mar 2020
€ 7,873,600
36
Apr 2020
€ 802,200
7
May 2020
€ 483,400
11
Jun 2020
€ 2,048,308
31
Jul 2020
€ 20,034,548
46
Aug 2020
€ 477,948
21
Sep 2020
€ 743,900
21
Oct 2020
€ 57,470,608
16
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).
Note: Only fines with valid information on the amount of the fine are taken into account.
1. By total sum of fines:
Country
Sum of Fines
UNITED KINGDOM
€ 132,756,200
(at 3 fines)
GERMANY
€ 61,636,633
(at 27 fines)
ITALY
€ 57,373,000
(at 31 fines)
FRANCE
€ 51,350,000
(at 6 fines)
AUSTRIA
€ 18,070,200
(at 8 fines)
SWEDEN
€ 7,085,430
(at 6 fines)
SPAIN
€ 3,939,610
(at 143 fines)
THE NETHERLANDS
€ 3,490,000
(at 6 fines)
BULGARIA
€ 3,210,690
(at 20 fines)
NORWAY
€ 1,038,960
(at 11 fines)
2. By total number of fines:
Country
Number of Fines
SPAIN
143
(with total € 3,939,610)
ROMANIA
41
(with total € 554,150)
HUNGARY
31
(with total € 519,485)
ITALY
31
(with total € 57,373,000)
GERMANY
27
(with total € 61,636,633)
BULGARIA
20
(with total € 3,210,690)
BELGIUM
16
(with total € 769,000)
POLAND
12
(with total € 1,004,098)
CZECH REPUBLIC
11
(with total € 19,366)
GREECE
11
(with total € 764,000)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.
Note: Only fines with valid information on the amount of the fine and on the type of violation are taken into account.
1. By total sum of fines:
Violation
Sum of Fines
Insufficient legal basis for data processing
€ 164,374,648
(at 166 fines)
Insufficient technical and organisational measures to ensure information security
€ 152,798,807
(at 87 fines)
Non-compliance with general data processing principles
€ 17,594,465
(at 68 fines)
Insufficient fulfilment of data subjects rights
€ 9,535,925
(at 43 fines)
Insufficient fulfilment of information obligations
€ 576,105
(at 21 fines)
Insufficient fulfilment of data breach notification obligations
€ 220,725
(at 9 fines)
Insufficient cooperation with supervisory authority
€ 143,379
(at 19 fines)
Lack of appointment of data protection officer
€ 136,000
(at 4 fines)
Insufficient data processing agreement
€ 14,380
(at 2 fines)
Insufficient cooperation with supervisory authority
€ 4,400
(at 1 fines)
Unknown
€ 500
(at 1 fines)
Insufficient fulfilment of data breach obligations
€ 286
(at 1 fines)
2. By total number of fines:
Violation
Number of Fines
Insufficient legal basis for data processing
166
(with total € 164,374,648)
Insufficient technical and organisational measures to ensure information security
87
(with total € 152,798,807)
Non-compliance with general data processing principles
68
(with total € 17,594,465)
Insufficient fulfilment of data subjects rights
43
(with total € 9,535,925)
Insufficient fulfilment of information obligations
21
(with total € 576,105)
Insufficient cooperation with supervisory authority
19
(with total € 143,379)
Insufficient fulfilment of data breach notification obligations
9
(with total € 220,725)
Lack of appointment of data protection officer
4
(with total € 136,000)
Insufficient data processing agreement
2
(with total € 14,380)
Insufficient cooperation with supervisory authority
1
(with total € 4,400)
Insufficient fulfilment of data breach obligations
1
(with total € 286)
Unknown
1
(with total € 500)
Statistics: Fines by sectors
The following statistics show how many fines and what sum of fines have been imposed to date in each sector.
Note: Only fines with valid information on the amount of the fine and on the the corresponding sector are taken into account.
1. By total sum of fines:
Sector
Sum of Fines
Media, Telecoms and Broadcasting
€ 116,060,379
(at 87 fines)
Accomodation and Hospitalty
€ 110,878,807
(at 14 fines)
Industry and Commerce
€ 53,013,071
(at 92 fines)
Transportation and Energy
€ 52,462,400
(at 30 fines)
Finance, Insurance and Consulting
€ 4,754,405
(at 45 fines)
Public Sector and Education
€ 3,894,971
(at 67 fines)
Health Care
€ 1,775,021
(at 21 fines)
Not assigned
€ 1,643,218
(at 29 fines)
Individuals and Private Associations
€ 892,819
(at 31 fines)
Employers
€ 24,529
(at 6 fines)
2. By total number of fines:
Sector
Number of Fines
Industry and Commerce
92
(with total € 53,013,071)
Media, Telecoms and Broadcasting
87
(with total € 116,060,379)
Public Sector and Education
67
(with total € 3,894,971)
Finance, Insurance and Consulting
45
(with total € 4,754,405)
Individuals and Private Associations
31
(with total € 892,819)
Transportation and Energy
30
(with total € 52,462,400)
Not assigned
29
(with total € 1,643,218)
Health Care
21
(with total € 1,775,021)
Accomodation and Hospitalty
14
(with total € 110,878,807)
Employers
6
(with total € 24,529)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).
Controller
Sector
Country
Fine [€]
Type of Violation
Date
1
Marriott International, Inc
Accomodation and Hospitalty
UNITED KINGDOM
110,390,200
Insufficient technical and organisational measures to ensure information security
09 Jul 2019
2
Google Inc.
Media, Telecoms and Broadcasting
FRANCE
50,000,000
Insufficient legal basis for data processing
21 Jan 2019
3
H&M Hennes & Mauritz Online Shop A.B. & Co. KG
Industry and Commerce
GERMANY
35,258,708
Insufficient legal basis for data processing
01 Oct 2020
4
TIM (telecommunications operator)
Media, Telecoms and Broadcasting
ITALY
27,800,000
Insufficient legal basis for data processing
15 Jan 2020
5
British Airways
Transportation and Energy
UNITED KINGDOM
22,046,000
Insufficient technical and organisational measures to ensure information security
16 Oct 2020
6
Austrian Post
Transportation and Energy
AUSTRIA
18,000,000
Insufficient legal basis for data processing
23 Oct 2019
7
Wind Tre S.p.A.
Media, Telecoms and Broadcasting
ITALY
16,700,000
Insufficient legal basis for data processing
13 Jul 2020
8
Deutsche Wohnen SE
Industry and Commerce
GERMANY
14,500,000
Non-compliance with general data processing principles
30 Oct 2019
9
Telecoms provider (1&1 Telecom GmbH)
Media, Telecoms and Broadcasting
GERMANY
9,550,000
Insufficient technical and organisational measures to ensure information security
09 Dec 2019
10
Eni Gas e Luce
Transportation and Energy
ITALY
8,500,000
Insufficient legal basis for data processing
11 Dec 2019
Home
License
Privacy
Imprint