Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated up to each month. The second overview contains the sum and number of fines per month.

Note: Only fines with valid information about year and month that are already included in our database are taken into account.

1. Course of overall sum and number of fines (cumulative):

a) Course of overall sum of fines (cumulative):


b) Course of overall number of fines (cumulative):

Month Sum of Fines (up to month) Number of Fines (up to month)
Jul 2018€ 400,0001
Sep 2018€ 400,3002
Oct 2018€ 400,6883
Nov 2018€ 420,6884
Dec 2018€ 436,3889
Jan 2019€ 50,437,27612
Feb 2019€ 50,502,38424
Mar 2019€ 50,964,68432
Apr 2019€ 51,273,81940
May 2019€ 51,833,34548
Jun 2019€ 52,717,04556
Jul 2019€ 53,084,62062
Aug 2019€ 56,337,45571
Sep 2019€ 57,258,97880
Oct 2019€ 59,271,352108
Nov 2019€ 60,387,922129
Dec 2019€ 72,595,452151
Jan 2020€ 100,711,612167
Feb 2020€ 101,487,302196
Mar 2020€ 107,371,302233
Apr 2020€ 108,175,502241
May 2020€ 108,661,902254
Jun 2020€ 110,689,710286
Jul 2020€ 130,696,258332
Aug 2020€ 131,324,206355
Sep 2020€ 132,063,106376
Oct 2020€ 210,184,264405
Nov 2020€ 228,606,193435
Dec 2020€ 244,172,488491
Jan 2021€ 261,742,638522
Feb 2021€ 263,492,188555
Mar 2021€ 278,665,613601
Apr 2021€ 280,394,983630
May 2021€ 283,760,983657
Jun 2021€ 285,175,083666

2. Sum and number of fines per month (non-cumulative):

a) Sum of fines per month (non-cumulative):


b) Number of fines per month (non-cumulative):

Month Sum of Fines (in month) Number of Fines (in month)
Jul 2018€ 400,0001
Sep 2018€ 3001
Oct 2018€ 3881
Nov 2018€ 20,0001
Dec 2018€ 15,7005
Jan 2019€ 50,000,8883
Feb 2019€ 65,10812
Mar 2019€ 462,3008
Apr 2019€ 309,1358
May 2019€ 559,5268
Jun 2019€ 883,7008
Jul 2019€ 367,5756
Aug 2019€ 3,252,8359
Sep 2019€ 921,5239
Oct 2019€ 2,012,37428
Nov 2019€ 1,116,57021
Dec 2019€ 12,207,53022
Jan 2020€ 28,116,16016
Feb 2020€ 775,69029
Mar 2020€ 5,884,00037
Apr 2020€ 804,2008
May 2020€ 486,40013
Jun 2020€ 2,027,80832
Jul 2020€ 20,006,54846
Aug 2020€ 627,94823
Sep 2020€ 738,90021
Oct 2020€ 78,121,15829
Nov 2020€ 18,421,92930
Dec 2020€ 15,566,29556
Jan 2021€ 17,570,15031
Feb 2021€ 1,749,55033
Mar 2021€ 15,173,42546
Apr 2021€ 1,729,37029
May 2021€ 3,366,00027
Jun 2021€ 1,414,1009
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).

Note: Only fines with valid information on the amount of the fine are taken into account.

1. By total sum of fines:
Country Sum of Fines
ITALY€ 76,298,601 (at 79 fines)
FRANCE€ 54,661,300 (at 14 fines)
GERMANY€ 49,186,833 (at 30 fines)
UNITED KINGDOM€ 44,221,000 (at 4 fines)
SPAIN€ 29,619,010 (at 236 fines)
SWEDEN€ 13,696,930 (at 22 fines)
THE NETHERLANDS€ 5,552,500 (at 12 fines)
BULGARIA€ 3,210,690 (at 20 fines)
POLAND€ 2,061,498 (at 24 fines)
NORWAY€ 1,412,050 (at 28 fines)

2. By total number of fines:
Country Number of Fines
SPAIN236 (with total € 29,619,010)
ITALY79 (with total € 76,298,601)
ROMANIA58 (with total € 695,850)
HUNGARY42 (with total € 783,483)
GERMANY30 (with total € 49,186,833)
NORWAY28 (with total € 1,412,050)
BELGIUM25 (with total € 1,018,000)
CZECH REPUBLIC25 (with total € 165,903)
POLAND24 (with total € 2,061,498)
SWEDEN22 (with total € 13,696,930)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.

Note: Only fines with valid information on the amount of the fine and on the type of violation are taken into account.

1. By total sum of fines:
Violation Sum of Fines
Insufficient legal basis for data processing€ 166,785,743 (at 253 fines)
Insufficient technical and organisational measures to ensure information security€ 66,611,719 (at 148 fines)
Non-compliance with general data processing principles€ 26,427,164 (at 129 fines)
Insufficient fulfilment of data subjects rights€ 16,148,025 (at 68 fines)
Insufficient fulfilment of information obligations€ 8,765,195 (at 42 fines)
Insufficient fulfilment of data breach notification obligations€ 1,245,791 (at 18 fines)
Insufficient cooperation with supervisory authority€ 186,729 (at 27 fines)
Lack of appointment of data protection officer€ 186,000 (at 5 fines)
Insufficient data processing agreement€ 89,380 (at 3 fines)
Unknown€ 500 (at 1 fines)

2. By total number of fines:
Violation Number of Fines
Insufficient legal basis for data processing253 (with total € 166,785,743)
Insufficient technical and organisational measures to ensure information security148 (with total € 66,611,719)
Non-compliance with general data processing principles129 (with total € 26,427,164)
Insufficient fulfilment of data subjects rights68 (with total € 16,148,025)
Insufficient fulfilment of information obligations42 (with total € 8,765,195)
Insufficient cooperation with supervisory authority27 (with total € 186,729)
Insufficient fulfilment of data breach notification obligations18 (with total € 1,245,791)
Lack of appointment of data protection officer5 (with total € 186,000)
Insufficient data processing agreement3 (with total € 89,380)
Unknown1 (with total € 500)
Statistics: Fines by sectors
The following statistics show how many fines and what sum of fines have been imposed to date in each sector.

Note: Only fines with valid information on the amount of the fine and on the the corresponding sector are taken into account.

1. By total sum of fines:
Sector Sum of Fines
Media, Telecoms and Broadcasting€ 133,382,915 (at 129 fines)
Employment€ 47,367,477 (at 53 fines)
Transportation and Energy€ 37,656,300 (at 34 fines)
Accomodation and Hospitalty€ 21,448,007 (at 21 fines)
Finance, Insurance and Consulting€ 18,502,285 (at 74 fines)
Health Care€ 11,219,533 (at 63 fines)
Industry and Commerce€ 7,794,442 (at 129 fines)
Public Sector and Education€ 6,806,463 (at 102 fines)
Individuals and Private Associations€ 1,188,496 (at 42 fines)
Not assigned€ 549,858 (at 25 fines)
Real Estate€ 508,370 (at 19 fines)
Unknown € 22,100 (at 3 fines)

2. By total number of fines:
Sector Number of Fines
Industry and Commerce129 (with total € 7,794,442)
Media, Telecoms and Broadcasting129 (with total € 133,382,915)
Public Sector and Education102 (with total € 6,806,463)
Finance, Insurance and Consulting74 (with total € 18,502,285)
Health Care63 (with total € 11,219,533)
Employment53 (with total € 47,367,477)
Individuals and Private Associations42 (with total € 1,188,496)
Transportation and Energy34 (with total € 37,656,300)
Not assigned25 (with total € 549,858)
Accomodation and Hospitalty21 (with total € 21,448,007)
Real Estate19 (with total € 508,370)
Unknown 3 (with total € 22,100)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).

Controller Sector Country Fine [€] Type of Violation Date
1Google Inc.Media, Telecoms and BroadcastingFRANCE50,000,000Insufficient legal basis for data processing21 Jan 2019
2H&M Hennes & Mauritz Online Shop A.B. & Co. KGEmploymentGERMANY35,258,708Insufficient legal basis for data processing01 Oct 2020
3TIM (telecommunications operator)Media, Telecoms and BroadcastingITALY27,800,000Insufficient legal basis for data processing15 Jan 2020
4British AirwaysTransportation and EnergyUNITED KINGDOM22,046,000Insufficient technical and organisational measures to ensure information security16 Oct 2020
5Marriott International, IncAccomodation and HospitaltyUNITED KINGDOM20,450,000Insufficient technical and organisational measures to ensure information security30 Oct 2020
6Wind Tre S.p.A.Media, Telecoms and BroadcastingITALY16,700,000Insufficient legal basis for data processing13 Jul 2020
7Vodafone Italia S.p.A.Media, Telecoms and BroadcastingITALY12,251,601Non-compliance with general data processing principles12 Nov 2020
8notebooksbilliger.deEmploymentGERMANY10,400,000Insufficient legal basis for data processing08 Jan 2021
9Eni Gas e LuceTransportation and EnergyITALY8,500,000Insufficient legal basis for data processing11 Dec 2019
10Vodafone España, S.A.U.Media, Telecoms and BroadcastingSPAIN8,150,000Insufficient fulfilment of data subjects rights11 Mar 2021