GDPR Fines Totalling €292 Million Issued in 661 Cases, Study by Privacy Affairs Finds

3 years since rolling out in May 2018, there have been 661 GDPR fines issued by European data protection authorities. Every one of the 28 EU nations, plus the United Kingdom, has issued at least one GDPR fine.
A GDPR tracking dashboard from Privacy Affairs displays official data from national data protection bodies to monitor the status of GDPR fines.
While GDPR sets out the regulatory framework that all EU member states must follow, each state legislates independently and is allowed to interpret the regulations differently and impose their own fines to organisations that break the EU law.
Nations with the highest fines:
Nations with the most fines:
Consult the complete dashboard & research here:
Spain issued the largest number of GDPR fines by far – totalling 222 fines during the last 3 years since the GDPR is in effect. The second is Italy – far behind Spain – with just 73 fines. This again shows the significant discrepancy in regards to GDPR enforcement.

Spain and Italy is followed by Romania, issuing 54 fines and Hungary with 39 fines. After these, the number of fines issued by other countries drops sharply, with most other countries not issuing more than 10 fines total in the span of 3 years.

The largest GDPR fine in these three years was issued by French authorities in January 2019. This is followed by a fine in Germany of €32,258,708.
Highest fines issued to Private individuals:
You can find the full research here:
For questions regarding the research or more information about the team behind the report, contact Miklos Zoltan at or visit Privacy Affairs.
Source: Privacy Affairs