Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated up to each month. The second overview contains the sum and number of fines per month.

Note: Only fines with valid information about year and month that are already included in our database are taken into account.

1. Course of overall sum and number of fines (cumulative):

a) Course of overall sum of fines (cumulative):


b) Course of overall number of fines (cumulative):

Month Sum of Fines (up to month) Number of Fines (up to month)
Jul 2018€ 400,0001
Sep 2018€ 400,3002
Oct 2018€ 400,6883
Nov 2018€ 420,6884
Dec 2018€ 436,3889
Jan 2019€ 50,437,27612
Feb 2019€ 50,502,38424
Mar 2019€ 50,964,68432
Apr 2019€ 51,273,81940
May 2019€ 51,833,34548
Jun 2019€ 52,717,04556
Jul 2019€ 53,084,62062
Aug 2019€ 56,337,45571
Sep 2019€ 57,258,97880
Oct 2019€ 59,271,352108
Nov 2019€ 60,387,922129
Dec 2019€ 72,595,452151
Jan 2020€ 100,711,612167
Feb 2020€ 101,487,302196
Mar 2020€ 107,371,302233
Apr 2020€ 108,175,502241
May 2020€ 108,658,902253
Jun 2020€ 110,686,710285
Jul 2020€ 130,693,258331
Aug 2020€ 131,321,206354
Sep 2020€ 132,060,106375
Oct 2020€ 210,181,264404
Nov 2020€ 228,603,193434
Dec 2020€ 244,169,488490
Jan 2021€ 261,739,638521
Feb 2021€ 263,501,188555
Mar 2021€ 278,679,313602
Apr 2021€ 281,169,333635
May 2021€ 288,256,202670
Jun 2021€ 294,807,802704
Jul 2021€ 1,049,892,002751
Aug 2021€ 1,052,199,602771
Sep 2021€ 1,277,525,002788

2. Sum and number of fines per month (non-cumulative):

a) Sum of fines per month (non-cumulative):


b) Number of fines per month (non-cumulative):

Month Sum of Fines (in month) Number of Fines (in month)
Jul 2018€ 400,0001
Sep 2018€ 3001
Oct 2018€ 3881
Nov 2018€ 20,0001
Dec 2018€ 15,7005
Jan 2019€ 50,000,8883
Feb 2019€ 65,10812
Mar 2019€ 462,3008
Apr 2019€ 309,1358
May 2019€ 559,5268
Jun 2019€ 883,7008
Jul 2019€ 367,5756
Aug 2019€ 3,252,8359
Sep 2019€ 921,5239
Oct 2019€ 2,012,37428
Nov 2019€ 1,116,57021
Dec 2019€ 12,207,53022
Jan 2020€ 28,116,16016
Feb 2020€ 775,69029
Mar 2020€ 5,884,00037
Apr 2020€ 804,2008
May 2020€ 483,40012
Jun 2020€ 2,027,80832
Jul 2020€ 20,006,54846
Aug 2020€ 627,94823
Sep 2020€ 738,90021
Oct 2020€ 78,121,15829
Nov 2020€ 18,421,92930
Dec 2020€ 15,566,29556
Jan 2021€ 17,570,15031
Feb 2021€ 1,761,55034
Mar 2021€ 15,178,12547
Apr 2021€ 2,490,02033
May 2021€ 7,086,86935
Jun 2021€ 6,551,60034
Jul 2021€ 755,084,20047
Aug 2021€ 2,307,60020
Sep 2021€ 225,325,40017
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).

Note: Only fines with valid information on the amount of the fine are taken into account.

1. By total sum of fines:
Country Sum of Fines
LUXEMBOURG€ 746,071,000 (at 11 fines)
IRELAND€ 225,876,400 (at 9 fines)
ITALY€ 86,138,770 (at 92 fines)
FRANCE€ 57,314,300 (at 18 fines)
GERMANY€ 49,258,633 (at 32 fines)
UNITED KINGDOM€ 44,250,000 (at 5 fines)
SPAIN€ 32,697,610 (at 288 fines)
SWEDEN€ 15,331,730 (at 24 fines)
THE NETHERLANDS€ 6,764,500 (at 15 fines)
BULGARIA€ 3,210,690 (at 20 fines)

2. By total number of fines:
Country Number of Fines
SPAIN288 (with total € 32,697,610)
ITALY92 (with total € 86,138,770)
ROMANIA62 (with total € 703,050)
HUNGARY44 (with total € 814,683)
GERMANY32 (with total € 49,258,633)
NORWAY32 (with total € 1,535,350)
POLAND29 (with total € 2,111,948)
BELGIUM25 (with total € 1,018,000)
CZECH REPUBLIC25 (with total € 165,903)
GREECE24 (with total € 864,000)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.

Note: Only fines with valid information on the amount of the fine and on the type of violation are taken into account.

1. By total sum of fines:
Violation Sum of Fines
Non-compliance with general data processing principles€ 781,874,864 (at 168 fines)
Insufficient fulfilment of information obligations€ 234,940,895 (at 58 fines)
Insufficient legal basis for data processing€ 176,211,312 (at 280 fines)
Insufficient technical and organisational measures to ensure information security€ 67,801,519 (at 170 fines)
Insufficient fulfilment of data subjects rights€ 16,246,825 (at 77 fines)
Insufficient fulfilment of data breach notification obligations€ 1,284,091 (at 20 fines)
Lack of appointment of data protection officer€ 219,000 (at 7 fines)
Insufficient cooperation with supervisory authority€ 207,679 (at 32 fines)
Insufficient data processing agreement€ 93,580 (at 4 fines)
Unknown€ 500 (at 1 fines)

2. By total number of fines:
Violation Number of Fines
Insufficient legal basis for data processing280 (with total € 176,211,312)
Insufficient technical and organisational measures to ensure information security170 (with total € 67,801,519)
Non-compliance with general data processing principles168 (with total € 781,874,864)
Insufficient fulfilment of data subjects rights77 (with total € 16,246,825)
Insufficient fulfilment of information obligations58 (with total € 234,940,895)
Insufficient cooperation with supervisory authority32 (with total € 207,679)
Insufficient fulfilment of data breach notification obligations20 (with total € 1,284,091)
Lack of appointment of data protection officer7 (with total € 219,000)
Insufficient data processing agreement4 (with total € 93,580)
Unknown1 (with total € 500)
Statistics: Fines by sectors
The following statistics show how many fines and what sum of fines have been imposed to date in each sector.

Note: Only fines with valid information on the amount of the fine and on the the corresponding sector are taken into account.

1. By total sum of fines:
Sector Sum of Fines
Industry and Commerce€ 765,029,042 (at 165 fines)
Media, Telecoms and Broadcasting€ 359,352,215 (at 137 fines)
Employment€ 47,656,677 (at 66 fines)
Transportation and Energy€ 42,112,469 (at 36 fines)
Accomodation and Hospitalty€ 21,453,207 (at 23 fines)
Finance, Insurance and Consulting€ 21,032,185 (at 83 fines)
Health Care€ 11,750,333 (at 74 fines)
Public Sector and Education€ 7,975,063 (at 112 fines)
Individuals and Private Associations€ 1,325,596 (at 54 fines)
Not assigned€ 678,008 (at 43 fines)
Real Estate€ 515,470 (at 24 fines)

2. By total number of fines:
Sector Number of Fines
Industry and Commerce165 (with total € 765,029,042)
Media, Telecoms and Broadcasting137 (with total € 359,352,215)
Public Sector and Education112 (with total € 7,975,063)
Finance, Insurance and Consulting83 (with total € 21,032,185)
Health Care74 (with total € 11,750,333)
Employment66 (with total € 47,656,677)
Individuals and Private Associations54 (with total € 1,325,596)
Not assigned43 (with total € 678,008)
Transportation and Energy36 (with total € 42,112,469)
Real Estate24 (with total € 515,470)
Accomodation and Hospitalty23 (with total € 21,453,207)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).

Controller Sector Country Fine [€] Type of Violation Date
1Amazon Europe Core S.à.r.l.Industry and CommerceLUXEMBOURG746,000,000Non-compliance with general data processing principles16 Jul 2021
2WhatsApp Ireland Ltd.Media, Telecoms and BroadcastingIRELAND225,000,000Insufficient fulfilment of information obligations02 Sep 2021
3Google LLCMedia, Telecoms and BroadcastingFRANCE50,000,000Insufficient legal basis for data processing21 Jan 2019
4H&M Hennes & Mauritz Online Shop A.B. & Co. KGEmploymentGERMANY35,258,708Insufficient legal basis for data processing01 Oct 2020
5TIM (telecommunications operator)Media, Telecoms and BroadcastingITALY27,800,000Insufficient legal basis for data processing15 Jan 2020
6British AirwaysTransportation and EnergyUNITED KINGDOM22,046,000Insufficient technical and organisational measures to ensure information security16 Oct 2020
7Marriott International, IncAccomodation and HospitaltyUNITED KINGDOM20,450,000Insufficient technical and organisational measures to ensure information security30 Oct 2020
8Wind Tre S.p.A.Media, Telecoms and BroadcastingITALY16,700,000Insufficient legal basis for data processing13 Jul 2020
9Vodafone Italia S.p.A.Media, Telecoms and BroadcastingITALY12,251,601Non-compliance with general data processing principles12 Nov 2020
10notebooksbilliger.deEmploymentGERMANY10,400,000Insufficient legal basis for data processing08 Jan 2021