GDPR fines, on the record
Enforcement decisions from across Europe, collected and described by the member firms of the INPLP — each with the articles invoked, the reasoning, and a link to the authority’s own publication.
- 312
- documented fines
- 21
- jurisdictions
- €292m
- across the 226 fines stated in euro
- €105m
- largest single fine on record
The record covers seven currencies. No historical exchange rates are on file for the decision dates, so the total above is deliberately limited to the fines stated in euro rather than converted into a figure that would look precise without being so.
What is it
A comprehensive database of fines imposed by data protection authorities for GDPR violations around the European Union and beyond — each described in the words of the lawyers who followed the case.
Browse
Filter by jurisdiction, year, sector — or by the GDPR article invoked, which is usually the more useful question. The three largest jurisdictions in the record:
Who reports
Each entry comes from a privacy law practice in the jurisdiction it concerns, reading the decision in its original language — almost always a member firm of the INPLP. Every case names the firm that reported it.
The firms behind the record
Every entry was read in its original language and written up by a privacy law practice in the jurisdiction it comes from. 21 firms have contributed so far.
- Wolf Theiss62
- Mehmet Gün48
- Andersen Tax & Legal26
- Advokáti Chlipala s.r.o.20
- RPLegal&Tax Associazione Professionale18
- tassos papadopoulos & associates LLC18
- Derra, Meyer & Partner16
- Cordemeyer & Slager15
- Alain Bensoussan Avocats Lexing14
- Zepos & Yannopoulos10
- Götzl Thiele EUROLAWYER® Rechtsanwälte7
- Abreu Advogados6
- Timelex5
- Pinsent Masons (UK)4
- Dimitrov, Petrov & Co. Law Firm3
- Gjessing Reimers3
- Mitla Smart City Malta3
- NJORD Advokatpartnerselskab3
- aringer herbst winklbauer rechtsanwälte2
- Nielsen Legal, advokátní kancelář, s. r. o.2
- Simplegal Dr. Necz Dániel Ügyvédi Iroda1
Names without a link belong to firms that are not part of the network today. Their contributions stay on the record — the work was done.