BULLETIN №083Last updated · 05 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -22.5%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Nov 2024 | Uptime-IT ApSUptime-IT ApS was fined by Datatilsynet 40,000 DKK for failing to implement adequate security measures as a data processor. This led to a ransomware attack that encrypted sensitive personal data, including health information and CPR numbers, which could not be restored. | DK | Datatilsynet | GDPR | €5,362 | ↗ |
| 16 Sept 2021 | Favrskov KommuneFavrskov Kommune was fined 75,000 DKK for failing to implement appropriate security measures, including encryption, to protect sensitive personal data on a stolen laptop. The authority found a breach of GDPR Article 32. | DK | Datatilsynet | GDPR | €10,086 | ↗ |
| 22 Jun 2021 | VirksomhetenThe Norwegian DPA fined Virksomheten NOK 150,000 for accessing a former employee’s email account without a legal basis and for failing to close the account. The authority found breaches of GDPR rules on information duties, data deletion, and handling objections. | NO | Datatilsynet | GDPR | €14,678 | ↗ |
| 04 Aug 2020 | PrivatBo A.M.B.A. af 1993PrivatBo was reported to the police, and Datatilsynet recommended a fine of 150,000 DKK for inadequate data security measures. The incident led to the unintended disclosure of tenants' confidential information on USB drives. | DK | Datatilsynet | GDPR | €20,145 | ↗ |
| 11 Sept 2025 | ILVA A/SVestre Landsret upheld a DKK 1.5 million GDPR fine against ILVA A/S. The case concerned retention of data on about 385,000 customers without a deletion policy, and the fine was based on the group’s total turnover. | DK | Datatilsynet | GDPR | €200,000 | ↗ |
| 02 Jan 2023 | Dulnevnd fyritøka (Dátueftirlitið)DATFO referred a company to the police for suspected breaches of data protection law. The company collected and stored personal data without a valid legal basis and without providing adequate information to the data subjects. Its website contact mechanism also caused data intended for a specific provider to be collected and retained by the company. | FO | DATFO | GDPR | €13,446 | ↗ |
| 28 Oct 2025 | SIA ZZ DatsThe Latvian Data State Inspectorate found that SIA ZZ Dats failed to meet GDPR Article 32 requirements for appropriate technical and organizational measures. The case involved a major personal data leak affecting nearly all Latvian municipalities, and the authority imposed an administrative fine of EUR 300,000. The company has appealed the decision. | LV | Datu valsts inspekcija | GDPR | €300,000 | ↗ |
| 30 Apr 2025 | TikTok Technology LimitedThe Irish DPC imposed a fine of EUR 530,000,000 on TikTok Technology Limited in inquiry IN-21-9-2. The decision is currently under appeal. | IE | DPC | GDPR | €530,000,000 | ↗ |
| 22 Oct 2024 | LinkedInThe Irish DPC fined LinkedIn EUR 310,000,000. The case concerns data processing violations and is currently under appeal. | IE | DPC | GDPR | €310,000,000 | ↗ |
| 15 Mar 2022 | Meta (Facebook)The Irish DPC fined Meta (Facebook) EUR 17,000,000 in case IN-18-11-5. The penalty has been collected. | IE | DPC | GDPR | €17,000,000 | ↗ |
| 12 Aug 2020 | TuslaThe Irish DPC fined Tusla EUR 85,000 in inquiry IN-18-11-4. The fine has been collected. | IE | DPC | GDPR | €85,000 | ↗ |
| 16 Jan 2023 | Kildare County CouncilThe Irish DPC imposed a fine of EUR 50,000 on Kildare County Council in inquiry 05/SIU/2018. The fine has been collected. | IE | DPC | GDPR | €50,000 | ↗ |
| 02 Sept 2022 | Meta (Instagram)The Irish DPC imposed a fine of EUR 405,000,000 on Meta (Instagram) in inquiry IN-20-7-4. The decision is currently under appeal. | IE | DPC | GDPR | €405,000,000 | ↗ |
| 26 Sept 2024 | Meta Platforms Ireland Limited (MPIL)The Irish DPC imposed a fine of 91,000,000 EUR on Meta Platforms Ireland Limited. The case relates to an inquiry and is currently pending appeal. | IE | DPC | GDPR | €91,000,000 | ↗ |
| 01 Sept 2023 | TikTok Technology Limited (TTL)The Irish DPC imposed a fine of EUR 345,000,000 on TikTok Technology Limited (TTL) following an inquiry. The matter remains ongoing because the decision is under appeal. | IE | DPC | GDPR | €345,000,000 | ↗ |
| 25 Nov 2022 | Meta DatasetThe Irish DPC fined Meta Dataset EUR 265,000,000 in inquiry IN-21-4-2. The matter is currently pending appeal. | IE | DPC | GDPR | €265,000,000 | ↗ |
| 16 Jun 2023 | Department of HealthThe Irish DPC fined Department of Health €22,500 in inquiry IN-21-3-2. The fine has been collected. | IE | DPC | GDPR | €22,500 | ↗ |
| 14 Mar 2022 | Bank of Ireland Group plcThe Irish DPC fined Bank of Ireland Group plc EUR 463,000 in inquiry IN-19-9-5. The penalty status is recorded as collected. | IE | DPC | GDPR | €463,000 | ↗ |
| 27 Feb 2023 | Bank of Ireland 365 (‘BOI’)The Irish DPC fined Bank of Ireland 365 (‘BOI’) €750,000 in inquiry IN-20-7-2. The fine has been collected. | IE | DPC | GDPR | €750,000 | ↗ |
| 12 Jan 2023 | WhatsApp Ireland Ltd.The Irish DPC fined WhatsApp Ireland Ltd. EUR 5,500,000 in case IN-18-5-6. The decision is currently under appeal. | IE | DPC | GDPR | €5,500,000 | ↗ |