Submit a Link
×
Want to share with us a link to a GDPR fine which we have not yet included in the list? Feel free to submit it here (note that we only list GDPR fines, no fines imposed under the "old laws"):
Fines Database
Fine Models by DPAs
Germany
Netherlands
Fines Statistics
[x] Remove all filters
Filter by country:
Filter by violation (Art.):
All
5
6
7
9
12
13
14
15
17
18
21
24
25
28
29
31
32
33
34
35
36
37
58
83
Chronological statistic
Highest fines: by country
Highest fines: by type of violation
Highest fines: individual
Statistics: Fines imposed over time
The following statistics show how many fines and what sum of fines have been imposed per month so far. The first overview contains a cumulative summary, that is, all fines accumulated
up to each month
. The second overview contains the sum and number of fines
per month
.
Note: Only fines with valid information about year and month that are already included in our database are taken into account.
1. Course of overall sum and number of fines (cumulative):
a) Course of overall sum of fines (cumulative):
b) Course of overall number of fines (cumulative):
Month
Sum of Fines (up to month)
Number of Fines (up to month)
Jul 2018
€ 400,000
1
Sep 2018
€ 400,300
2
Oct 2018
€ 400,688
3
Nov 2018
€ 420,688
4
Dec 2018
€ 436,388
9
Jan 2019
€ 50,437,276
12
Feb 2019
€ 50,502,384
24
Mar 2019
€ 50,964,684
32
Apr 2019
€ 51,273,819
40
May 2019
€ 51,833,345
48
Jun 2019
€ 52,917,895
57
Jul 2019
€ 368,275,670
65
Aug 2019
€ 371,528,505
74
Sep 2019
€ 372,435,028
83
Oct 2019
€ 406,947,402
112
Nov 2019
€ 408,062,202
132
Dec 2019
€ 429,819,732
155
Jan 2020
€ 457,935,892
171
Feb 2020
€ 458,821,982
200
Mar 2020
€ 466,695,582
236
Apr 2020
€ 467,497,782
243
May 2020
€ 468,264,182
255
Jun 2020
€ 470,311,322
285
Jul 2020
€ 490,327,082
326
Aug 2020
€ 490,724,330
343
2. Sum and number of fines per month (non-cumulative):
a) Sum of fines per month (non-cumulative):
b) Number of fines per month (non-cumulative):
Month
Sum of Fines (in month)
Number of Fines (in month)
Jul 2018
€ 400,000
1
Sep 2018
€ 300
1
Oct 2018
€ 388
1
Nov 2018
€ 20,000
1
Dec 2018
€ 15,700
5
Jan 2019
€ 50,000,888
3
Feb 2019
€ 65,108
12
Mar 2019
€ 462,300
8
Apr 2019
€ 309,135
8
May 2019
€ 559,526
8
Jun 2019
€ 1,084,550
9
Jul 2019
€ 315,357,775
8
Aug 2019
€ 3,252,835
9
Sep 2019
€ 906,523
9
Oct 2019
€ 34,512,374
29
Nov 2019
€ 1,114,800
20
Dec 2019
€ 21,757,530
23
Jan 2020
€ 28,116,160
16
Feb 2020
€ 886,090
29
Mar 2020
€ 7,873,600
36
Apr 2020
€ 802,200
7
May 2020
€ 766,400
12
Jun 2020
€ 2,047,140
30
Jul 2020
€ 20,015,760
41
Aug 2020
€ 397,248
17
Statistics: Countries with highest fines (Top 10)
The following statistics show how many fines and what sum of fines have been imposed per country to date (only top 10 countries).
1. By total sum of fines:
Country
Sum of Fines
UNITED KINGDOM
€ 315,310,200
(at 3 fines)
ITALY
€ 57,214,000
(at 26 fines)
FRANCE
€ 51,350,000
(at 6 fines)
GERMANY
€ 26,377,925
(at 26 fines)
AUSTRIA
€ 18,070,200
(at 8 fines)
SWEDEN
€ 7,085,430
(at 6 fines)
THE NETHERLANDS
€ 3,490,000
(at 6 fines)
SPAIN
€ 3,474,910
(at 123 fines)
BULGARIA
€ 3,210,690
(at 20 fines)
NORWAY
€ 1,032,060
(at 10 fines)
2. By total number of fines:
Country
Number of Fines
SPAIN
123
(with total sum of € 3,474,910)
ROMANIA
35
(with total sum of € 541,650)
HUNGARY
28
(with total sum of € 517,197)
GERMANY
26
(with total sum of € 26,377,925)
ITALY
26
(with total sum of € 57,214,000)
BULGARIA
20
(with total sum of € 3,210,690)
BELGIUM
15
(with total sum of € 764,000)
CZECH REPUBLIC
11
(with total sum of € 19,366)
NORWAY
10
(with total sum of € 1,032,060)
GREECE
9
(with total sum of € 753,000)
Statistics: Fines by type of violation
The following statistics show how many fines and what sum of fines have been imposed per type of GDPR violation to date.
1. By total sum of fines:
Violation
Sum of Fines
Insufficient technical and organisational measures to ensure information security
€ 335,186,607
(at 80 fines)
Insufficient legal basis for data processing
€ 128,688,780
(at 147 fines)
Non-compliance with general data processing principles
€ 17,497,565
(at 59 fines)
Insufficient fulfilment of data subjects rights
€ 9,514,697
(at 38 fines)
Insufficient fulfilment of information obligations
€ 568,305
(at 20 fines)
Insufficient fulfilment of data breach notification obligations
€ 220,725
(at 9 fines)
Lack of appointment of data protection officer
€ 136,000
(at 4 fines)
Insufficient cooperation with supervisory authority
€ 135,211
(at 15 fines)
Insufficient data processing agreement
€ 14,380
(at 2 fines)
Insufficient cooperation with supervisory authority
€ 4,400
(at 1 fines)
Unknown
€ 500
(at 1 fines)
Insufficient fulfilment of data breach obligations
€ 286
(at 1 fines)
2. By total number of fines:
Violation
Number of Fines
Insufficient legal basis for data processing
147
(with total sum of € 128,688,780)
Insufficient technical and organisational measures to ensure information security
80
(with total sum of € 335,186,607)
Non-compliance with general data processing principles
59
(with total sum of € 17,497,565)
Insufficient fulfilment of data subjects rights
38
(with total sum of € 9,514,697)
Insufficient fulfilment of information obligations
20
(with total sum of € 568,305)
Insufficient cooperation with supervisory authority
15
(with total sum of € 135,211)
Insufficient fulfilment of data breach notification obligations
9
(with total sum of € 220,725)
Lack of appointment of data protection officer
4
(with total sum of € 136,000)
Insufficient data processing agreement
2
(with total sum of € 14,380)
Insufficient cooperation with supervisory authority
1
(with total sum of € 4,400)
Insufficient fulfilment of data breach obligations
1
(with total sum of € 286)
Unknown
1
(with total sum of € 500)
Statistics: Highest individual fines (Top 10)
The following statistics shows the highest individual fines imposed to date per data controller (only top 10 fines).
Controller
Country
Fine [€]
Type of Violation
Date
1
British Airways
UNITED KINGDOM
204,600,000
Insufficient technical and organisational measures to ensure information security
08 Jul 2019
2
Marriott International, Inc
UNITED KINGDOM
110,390,200
Insufficient technical and organisational measures to ensure information security
09 Jul 2019
3
Google Inc.
FRANCE
50,000,000
Insufficient legal basis for data processing
21 Jan 2019
4
TIM (telecommunications operator)
ITALY
27,800,000
Insufficient legal basis for data processing
15 Jan 2020
5
Austrian Post
AUSTRIA
18,000,000
Insufficient legal basis for data processing
23 Oct 2019
6
Wind Tre S.p.A.
ITALY
16,700,000
Insufficient legal basis for data processing
13 Jul 2020
7
Deutsche Wohnen SE
GERMANY
14,500,000
Non-compliance with general data processing principles
30 Oct 2019
8
Telecoms provider (1&1 Telecom GmbH)
GERMANY
9,550,000
Insufficient technical and organisational measures to ensure information security
09 Dec 2019
9
Eni Gas e Luce
ITALY
8,500,000
Insufficient legal basis for data processing
11 Dec 2019
10
Google LLC
SWEDEN
7,000,000
Insufficient fulfilment of data subjects rights
11 Mar 2020
Home
License
Privacy
Imprint