Order report
BULLETIN №083Last updated · 10 Aug 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
11 Mar 2020Google, rätten att få sökresultat borttagnaGoogle LLC was fined by IMY for processing sensitive personal data without a valid legal basis and for handling data relating to criminal offenses without authorization. The authority also found that Google did not respond promptly to requests for data removal, in breach of several GDPR provisions.SEIMYGDPR€6,993,000↗
—Enel Energia SpAEnel Energia SpA was fined EUR 79.1 million by the Italian data protection authority, Garante. The case concerned misuse of personal data and was a major GDPR enforcement action.ITGarante per la protezione dei dati personaliGDPR€79,100,000↗
11 Aug 2022AMPLIFON Magyarország Kereskedelmi és Szolgáltató Korlátolt Felelősségű TársaságAMPLIFON Magyarország was fined by the NAIH 80,000,000 HUF for processing personal data for market research without proper notice to data subjects, without a specific and legitimate purpose, and without a valid legal basis. The authority found that the company’s conduct breached core GDPR principles.HUNAIHGDPRFt 80,000,000↗
22 Jun 2023Digi Távközlési és Szolgáltató Kft.Digi Távközlési és Szolgáltató Kft. was fined by the NAIH for failing to delete a test database containing personal data after the tests were completed. The authority found a breach of storage limitation and data security obligations.HUNAIHGDPR€216,000↗
02 Jul 2024ALDI MAGYARORSZÁG ÉLELMISZER Élelmiszer Kereskedelmi Betéti TársaságALDI Magyarország was fined by the NAIH 80,000,000 HUF for failing to ensure transparency in data processing related to the purchase of alcoholic beverages. The authority found breaches of GDPR transparency and data minimization principles.HUNAIHGDPR€202,000↗
26 Sept 2024Meta Platforms Ireland Limited (MPIL)The Irish DPC imposed a fine of 91,000,000 EUR on Meta Platforms Ireland Limited. The case relates to an inquiry and is currently pending appeal.IEDPCGDPR€91,000,000↗
02 Jul 2024ALDI MAGYARORSZÁG ÉLELMISZER Élelmiszer Kereskedelmi Betéti TársaságNAIH imposed a HUF 95,000,000 fine on ALDI Magyarország for GDPR violations linked to data processing during alcohol purchases. The authority cited improper age verification and insufficient personal data protection measures.HUNAIHGDPR€240,000↗
26 Jan 2021Grindr LLCThe Norwegian DPA intends to fine Grindr 100 million NOK for sharing user data with third parties without valid consent. The conduct was assessed as a breach of GDPR consent requirements.NODatatilsynetGDPR€9,627,000↗
08 May 2026MLU B.V.MLU B.V. was fined €100,000,000 by AP for transferring personal data of users in Finland and Norway to Russia without adequate safeguards. The authority found breaches of GDPR Articles 44, 46, and 5.NLAPGDPR€100,000,000↗
18 May 2020Digi Távközlési és Szolgáltató Kft.Digi Távközlési és Szolgáltató Kft. was fined by the NAIH 100,000,000 HUF for failing to delete a test database containing personal data after its intended use. The authority also found inadequate security measures, which led to unauthorized access to personal data.HUNAIHGDPR€283,000↗
08 May 2026MLU B.V.The Dutch data protection authority imposed a EUR 100 million fine on MLU B.V. for transferring personal data to Russia without adequate safeguards. It also ordered the company to stop transferring personal data of individuals in Norway and Finland to Russia via the Yango app.NLAutoriteit PersoonsgegevensGDPR€100,000,000↗
20 Dec 2023Educational Development Informatikai Zrt.The company failed to implement adequate data security measures and did not report a data breach without undue delay. The authority found breaches of GDPR Articles 32 and 33.HUNAIHGDPR€286,000↗
05 Dec 2025XThe European Commission imposed a EUR 120 million fine on X for breaching transparency requirements under the Digital Services Act. The penalty covered deceptive verification design, an inadequate ad repository, and restricted access for researchers.EUEuropean CommissionDSA€120,000,000↗
01 Sept 2025SOCIETE DE VENTE EN LIGNE DE VETEMENTS, CHAUSSURES ET ACCESSOIRESSOCIETE DE VENTE EN LIGNE DE VETEMENTS, CHAUSSURES ET ACCESSOIRES was fined EUR 150,000,000 by CNIL. The case concerns a regulatory breach that resulted in an administrative sanction.FRCNILGDPR€150,000,000↗
03 Sept 2025SheinCNIL imposed a 176,000,000 USD fine on Shein for using cookies without valid user consent. The case concerns breaches of consent and transparency requirements for online tracking.FRCNILePrivacy€151,034,000↗
23 Apr 2025MetaThe European Commission fined Meta EUR 200 million for breaching the Digital Markets Act. The sanction concerns Meta’s “consent or pay” model used for Facebook and Instagram users in Europe.IEEuropean CommissionDMA€200,000,000↗
10 Oct 2023TemuThe European Commission imposed a EUR 200 million fine on Temu under the Digital Services Act. The authority said Temu failed to identify, analyse, and assess systemic risks linked to illegal products offered on its platform.EUEuropean CommissionDSA€200,000,000↗
20 Aug 2021WhatsApp Ireland LtdThe Irish DPC imposed a fine of EUR 225,000,000 on WhatsApp Ireland Ltd in inquiry IN-18-12-2. The decision is currently under appeal.IEDPCGDPR€225,000,000↗
08 Feb 2022Budapest Bank Zrt.Budapest Bank Zrt. was fined by NAIH for improper personal data processing related to the analysis of recorded phone conversations. The authority found violations of several GDPR provisions.HUNAIHGDPR€707,000↗
12 Dec 2024Meta Platforms Ireland LimitedThe Irish DPC imposed a fine of EUR 251,000,000 on Meta Platforms Ireland Limited in connection with inquiries IN-18-10-1 and IN-18-11-1. The matter is currently pending appeal.IEDPCGDPR€251,000,000↗