Privacy Enforcement Database
Published privacy enforcement records. Filter by region, confirmed legal basis and subject. Europe is the default; worldwide cases remain in source review.
Choose a suggestion or search all GDPR and ePrivacy actions.
As of October 2026, Cookie Fines tracks 227 published privacy enforcement actions in this selection with attributed fines of €389.9M across 21 jurisdictions, including 82 fines, 53 court rulings, and 2 CJEU rulings. The average recorded fine amount is €4.8M. Data is sourced from GDPRhub, CMS Enforcement Tracker, and direct DPA publications, updated daily. 227 records have an automated check recorded. Source text was retrieved for 227 records; 46 checked records need review or have incomplete evidence. What these checks mean.
€389.9M
Total Penalties
227
Enforcement Actions
21
Countries
€4.8M
Average Fine
Enforcement Action Types
Largest Recorded Privacy Fines
The largest recorded fines in this selection of published privacy enforcement cases
MLU B.V.
2026 · Autoriteit Persoonsgegevens
Google Ireland Ltd
2020 · Commission Nationale de l'Informatique et des Libertés
Microsoft Ireland Operations Limited
2022 · Commission Nationale de l'Informatique et des Libertés
Amazon Europe Core
2020 · Commission Nationale de l'Informatique et des Libertés
Enel Energia Spa
2021 · Garante per la protezione dei dati personali
Enforcement by Country
€207.2M
15 actions
€100.6M
10 actions
€64.7M
87 actions
€14.0M
2 actions
€2.2M
6 actions
€890K
2 actions
€100K
23 actions
€96K
14 actions
€25K
1 actions
€22K
3 actions
€2K
3 actions
€0
1 actions
€0
1 actions
€0
22 actions
€0
5 actions
€0
2 actions
€0
4 actions
€0
2 actions
€0
2 actions
€0
1 actions
€0
21 actions
Check Your Cookie Compliance Risk
Use our risk calculator to estimate potential fines based on your current cookie setup and real enforcement data.