23andMe Inc - GDPR and data-protection Fines & Penalties

Total Actions

3

Total Fines

€5.4M

Countries

2

Authorities

2

Enforcement Overview

23andMe Inc has been subject to 3 enforcement actions by European data protection authorities for GDPR and data-protection violations across 2 countries, resulting in cumulative fines of €5,402,700. The repeated enforcement actions indicate persistent compliance challenges that have drawn attention from multiple European regulators. Enforcement proceedings have been brought by regulators in Spain, United Kingdom. The authorities involved include Agencia Española de Protección de Datos, Information Commissioner's Office. The most significant penalty was a €2,702,700 fine issued in 2025.

Actions by Year

YearActionsTotal Fines
20253€5.4M

Frequently Asked Questions

How many GDPR and data-protection enforcement actions has 23andMe Inc received?

23andMe Inc has been subject to 3 GDPR and data-protection enforcement actions totaling €5.4M.

In which countries has 23andMe Inc faced GDPR and data-protection enforcement?

23andMe Inc has faced enforcement actions in Spain, United Kingdom.

Explore More