As of September 2026, Cookie Fines tracks 5,820 GDPR and ePrivacy enforcement actions totalling over €11.7B across 33 European countries, including 3779 fines, 1311 court rulings, and 165 CJEU rulings. The average GDPR fine amount is €3.2M. Data is sourced from GDPRhub, CMS Enforcement Tracker, and direct DPA publications, updated daily. 5,820 records have been AI source-verified against original decision documents.
€11.7B
Total Penalties
5820
Enforcement Actions
33
Countries
€3.2M
Average Fine
Enforcement Action Types
Largest GDPR Fines
The biggest GDPR fines and highest fine ever recorded in our database
Enforcement by Country
€6.9B
86 actions
€1.8B
194 actions
€1.7B
355 actions
€514.5M
784 actions
€224.1M
1296 actions
€191.9M
143 actions
€123.5M
625 actions
€68.9M
163 actions
€50.5M
160 actions
€43.8M
117 actions
€42.5M
336 actions
€35.4M
184 actions
€28.5M
77 actions
€26.4M
70 actions
€15.3M
88 actions
€6.8M
17 actions
€5.1M
28 actions
€4.4M
106 actions
€4.1M
108 actions
€3.8M
43 actions
€3.5M
154 actions
€3.3M
34 actions
€2.2M
327 actions
€1.5M
69 actions
€1.2M
65 actions
€943K
20 actions
€512K
14 actions
€498K
43 actions
€268K
32 actions
€50K
10 actions
€7K
3 actions
€4K
1 actions
€0
68 actions
Check Your Cookie Compliance Risk
Use our risk calculator to estimate potential fines based on your current cookie setup and real enforcement data.