Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated up to each month. The second overview contains the sum and number of fines per month.

Note: Only fines with valid information about year and month that are already included in our database are taken into account.

1. Course of overall sum and number of fines (cumulative):

a) Course of overall sum of fines (cumulative):


b) Course of overall number of fines (cumulative):

Month Sum of Fines (up to month) Number of Fines (up to month)
Jul 2018€ 400,0001
Sep 2018€ 400,3002
Oct 2018€ 400,6883
Nov 2018€ 420,6884
Dec 2018€ 436,3889
Jan 2019€ 50,437,27612
Feb 2019€ 50,502,38424
Mar 2019€ 50,964,68432
Apr 2019€ 51,273,81940
May 2019€ 51,833,34548
Jun 2019€ 52,917,89557
Jul 2019€ 368,275,67065
Aug 2019€ 371,528,50574
Sep 2019€ 372,435,02883
Oct 2019€ 406,947,402112
Nov 2019€ 408,062,202132
Dec 2019€ 429,819,732155
Jan 2020€ 457,925,332168
Feb 2020€ 458,802,302194
Mar 2020€ 466,645,788221

2. Sum and number of fines per month (non-cumulative):

a) Sum of fines per month (non-cumulative):


b) Number of fines per month (non-cumulative):

Month Sum of Fines (in month) Number of Fines (in month)
Jul 2018€ 400,0001
Sep 2018€ 3001
Oct 2018€ 3881
Nov 2018€ 20,0001
Dec 2018€ 15,7005
Jan 2019€ 50,000,8883
Feb 2019€ 65,10812
Mar 2019€ 462,3008
Apr 2019€ 309,1358
May 2019€ 559,5268
Jun 2019€ 1,084,5509
Jul 2019€ 315,357,7758
Aug 2019€ 3,252,8359
Sep 2019€ 906,5239
Oct 2019€ 34,512,37429
Nov 2019€ 1,114,80020
Dec 2019€ 21,757,53023
Jan 2020€ 28,105,60013
Feb 2020€ 876,97026
Mar 2020€ 7,843,48627
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).

1. By total sum of fines:
Country Sum of Fines
UNITED KINGDOM€ 315,310,200 (at 3 fines)
FRANCE€ 51,100,000 (at 5 fines)
ITALY€ 39,448,000 (at 10 fines)
GERMANY€ 25,087,925 (at 24 fines)
AUSTRIA€ 18,070,100 (at 8 fines)
SWEDEN€ 7,053,630 (at 3 fines)
BULGARIA€ 3,198,460 (at 16 fines)
SPAIN€ 2,514,270 (at 80 fines)
THE NETHERLANDS€ 1,935,000 (at 4 fines)
POLAND€ 938,930 (at 6 fines)

2. By total number of fines:
Country Number of Fines
SPAIN80 (with total sum of € 2,514,270)
GERMANY24 (with total sum of € 25,087,925)
HUNGARY23 (with total sum of € 218,183)
ROMANIA22 (with total sum of € 487,500)
BULGARIA16 (with total sum of € 3,198,460)
CZECH REPUBLIC11 (with total sum of € 19,366)
ITALY10 (with total sum of € 39,448,000)
AUSTRIA8 (with total sum of € 18,070,100)
CYPRUS8 (with total sum of € 121,000)
GREECE8 (with total sum of € 748,000)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.

1. By total sum of fines:
Violation Sum of Fines
Insufficient technical and organisational measures to ensure information security€ 332,950,127 (at 58 fines)
Insufficient legal basis for data processing€ 110,170,058 (at 99 fines)
Non-compliance with general data processing principles€ 16,070,665 (at 40 fines)
Insufficient fulfilment of data subjects rights€ 7,807,697 (at 23 fines)
Insufficient fulfilment of information obligations€ 557,265 (at 15 fines)
Insufficient fulfilment of data breach notification obligations€ 158,425 (at 6 fines)
Lack of appointment of data protection officer€ 61,000 (at 2 fines)
Insufficient cooperation with supervisory authority€ 48,511 (at 7 fines)
Insufficient data processing agreement€ 14,380 (at 2 fines)
Unknown€ 500 (at 1 fines)
Insufficient fulfilment of data breach obligations€ 286 (at 1 fines)

2. By total number of fines:
Violation Number of Fines
Insufficient legal basis for data processing99 (with total sum of € 110,170,058)
Insufficient technical and organisational measures to ensure information security58 (with total sum of € 332,950,127)
Non-compliance with general data processing principles40 (with total sum of € 16,070,665)
Insufficient fulfilment of data subjects rights23 (with total sum of € 7,807,697)
Insufficient fulfilment of information obligations15 (with total sum of € 557,265)
Insufficient cooperation with supervisory authority7 (with total sum of € 48,511)
Insufficient fulfilment of data breach notification obligations6 (with total sum of € 158,425)
Insufficient data processing agreement2 (with total sum of € 14,380)
Lack of appointment of data protection officer2 (with total sum of € 61,000)
Insufficient fulfilment of data breach obligations1 (with total sum of € 286)
Unknown1 (with total sum of € 500)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).

Controller Country Fine [€] Type of Violation Date
1British AirwaysUNITED KINGDOM204,600,000Insufficient technical and organisational measures to ensure information security08 Jul 2019
2Marriott International, IncUNITED KINGDOM110,390,200Insufficient technical and organisational measures to ensure information security09 Jul 2019
3Google Inc.FRANCE50,000,000Insufficient legal basis for data processing21 Jan 2019
4TIM (telecommunications operator)ITALY27,800,000Insufficient legal basis for data processing15 Jan 2020
5Austrian PostAUSTRIA18,000,000Insufficient legal basis for data processing23 Oct 2019
6Deutsche Wohnen SEGERMANY14,500,000Non-compliance with general data processing principles30 Oct 2019
7Telecoms provider (1&1 Telecom GmbH)GERMANY9,550,000Insufficient technical and organisational measures to ensure information security09 Dec 2019
8Eni Gas e LuceITALY8,500,000Insufficient legal basis for data processing11 Dec 2019
9Google LLCSWEDEN7,000,000Insufficient fulfilment of data subjects rights11 Mar 2020
10Eni Gas e LuceITALY3,000,000Insufficient legal basis for data processing11 Dec 2019