Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated up to each month. The second overview contains the sum and number of fines per month.

Note: Only fines with valid information about year and month that are already included in our database are taken into account.

1. Course of overall sum and number of fines (cumulative):

a) Course of overall sum of fines (cumulative):


b) Course of overall number of fines (cumulative):

Month Sum of Fines (up to month) Number of Fines (up to month)
Jul 2018€ 400,0001
Sep 2018€ 400,3002
Oct 2018€ 400,6883
Nov 2018€ 420,6884
Dec 2018€ 436,3889
Jan 2019€ 50,437,27612
Feb 2019€ 50,502,38424
Mar 2019€ 50,964,38832
Apr 2019€ 51,276,52339
May 2019€ 51,833,76345
Jun 2019€ 52,909,76351
Jul 2019€ 368,258,96358
Aug 2019€ 371,505,59364
Sep 2019€ 372,412,11673
Oct 2019€ 406,821,630100
Nov 2019€ 407,936,520121
Dec 2019€ 418,028,120138
Jan 2020€ 418,251,120146

2. Sum and number of fines per month (non-cumulative):

a) Sum of fines per month (non-cumulative):


b) Number of fines per month (non-cumulative):

Month Sum of Fines (in month) Number of Fines (in month)
Jul 2018€ 400,0001
Sep 2018€ 3001
Oct 2018€ 3881
Nov 2018€ 20,0001
Dec 2018€ 15,7005
Jan 2019€ 50,000,8883
Feb 2019€ 65,10812
Mar 2019€ 462,0048
Apr 2019€ 312,1357
May 2019€ 557,2406
Jun 2019€ 1,076,0006
Jul 2019€ 315,349,2007
Aug 2019€ 3,246,6306
Sep 2019€ 906,5239
Oct 2019€ 34,409,51427
Nov 2019€ 1,114,89021
Dec 2019€ 10,091,60017
Jan 2020€ 223,0008
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).

1. By total sum of fines:
Country Sum of Fines
UNITED KINGDOM€ 315,310,200 (at 3 fines)
FRANCE€ 51,100,000 (at 5 fines)
GERMANY€ 24,914,725 (at 18 fines)
AUSTRIA€ 18,070,100 (at 8 fines)
BULGARIA€ 3,198,460 (at 16 fines)
SPAIN€ 1,525,100 (at 43 fines)
THE NETHERLANDS€ 1,410,000 (at 3 fines)
POLAND€ 934,330 (at 5 fines)
GREECE€ 570,000 (at 4 fines)
ROMANIA€ 474,500 (at 19 fines)

2. By total number of fines:
Country Number of Fines
SPAIN43 (with total sum of € 1,525,100)
ROMANIA19 (with total sum of € 474,500)
GERMANY18 (with total sum of € 24,914,725)
BULGARIA16 (with total sum of € 3,198,460)
HUNGARY14 (with total sum of € 189,781)
CZECH REPUBLIC11 (with total sum of € 19,070)
AUSTRIA8 (with total sum of € 18,070,100)
CYPRUS8 (with total sum of € 121,000)
BELGIUM6 (with total sum of € 39,000)
SLOVAKIA6 (with total sum of € 90,000)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.

1. By total sum of fines:
Violation Sum of Fines
Insufficient technical and organisational measures to ensure information security€ 332,326,427 (at 42 fines)
Insufficient legal basis for data processing€ 69,556,577 (at 65 fines)
Non-compliance with general data processing principles€ 16,042,874 (at 24 fines)
Insufficient fulfilment of data subjects rights€ 792,787 (at 20 fines)
Insufficient fulfilment of information obligations€ 550,765 (at 12 fines)
Insufficient fulfilment of data breach notification obligations€ 138,425 (at 5 fines)
Insufficient cooperation with supervisory authority€ 18,511 (at 6 fines)
Insufficient data processing agreement€ 14,380 (at 2 fines)
Lack of appointment of data protection officer€ 10,000 (at 1 fines)
Unknown€ 500 (at 1 fines)

2. By total number of fines:
Violation Number of Fines
Insufficient legal basis for data processing65 (with total sum of € 69,556,577)
Insufficient technical and organisational measures to ensure information security42 (with total sum of € 332,326,427)
Non-compliance with general data processing principles24 (with total sum of € 16,042,874)
Insufficient fulfilment of data subjects rights20 (with total sum of € 792,787)
Insufficient fulfilment of information obligations12 (with total sum of € 550,765)
Insufficient cooperation with supervisory authority6 (with total sum of € 18,511)
Insufficient fulfilment of data breach notification obligations5 (with total sum of € 138,425)
Insufficient data processing agreement2 (with total sum of € 14,380)
Lack of appointment of data protection officer1 (with total sum of € 10,000)
Unknown1 (with total sum of € 500)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).

Controller Country Fine [€] Type of Violation Date
1British AirwaysUNITED KINGDOM204,600,000Insufficient technical and organisational measures to ensure information security08 Jul 2019
2Marriott International, IncUNITED KINGDOM110,390,200Insufficient technical and organisational measures to ensure information security09 Jul 2019
3Google Inc.FRANCE50,000,000Insufficient legal basis for data processing21 Jan 2019
4Austrian PostAUSTRIA18,000,000Insufficient legal basis for data processing23 Oct 2019
5Deutsche Wohnen SEGERMANY14,500,000Non-compliance with general data processing principles30 Oct 2019
6Telecoms provider (1&1 Telecom GmbH)GERMANY9,550,000Insufficient technical and organisational measures to ensure information security09 Dec 2019
7National Revenue AgencyBULGARIA2,600,000Insufficient technical and organisational measures to ensure information security28 Aug 2019
8UWV (Dutch employee insurance service provider)THE NETHERLANDS900,000Insufficient technical and organisational measures to ensure information security31 Oct 2019
9Morele.netPOLAND645,000Insufficient technical and organisational measures to ensure information security10 Sep 2019
10DSK BankBULGARIA511,000Insufficient technical and organisational measures to ensure information security28 Aug 2019