GDPR Fines by Country

5,803 enforcement actions totaling €10.9B across 33 European countries. Select a country to explore its data protection authorities, enforcement trends, and notable cases.

Ireland leads European cookie enforcement with €6.9B across 85 actions, followed by France (€1.8B) and Netherlands (€867.6M). The Cookie Fines tracks enforcement across 33 European countries, updated daily.

Data current as of 22 August 2026 · Updated daily

Ireland

85 actions9 DPAs

€6.9B

decreasing

France

194 actions13 DPAs

€1.8B

decreasing

Netherlands

354 actions25 DPAs

€867.6M

decreasing

Italy

783 actions11 DPAs

€514.5M

decreasing

Spain

1294 actions10 DPAs

€224.1M

decreasing

United Kingdom

142 actions13 DPAs

€191.9M

decreasing

Germany

624 actions188 DPAs

€123.5M

decreasing

Greece

163 actions2 DPAs

€68.9M

decreasing

Norway

159 actions7 DPAs

€50.4M

decreasing

Sweden

117 actions11 DPAs

€43.8M

decreasing

Austria

329 actions23 DPAs

€42.5M

decreasing

Poland

184 actions13 DPAs

€35.4M

decreasing

Czech Republic

76 actions5 DPAs

€28.5M

stable

Croatia

70 actions10 DPAs

€26.4M

decreasing

Finland

87 actions8 DPAs

€15.3M

decreasing

Portugal

17 actions6 DPAs

€6.8M

stable

Lithuania

28 actions3 DPAs

€5.1M

decreasing

Hungary

106 actions2 DPAs

€4.4M

stable

Denmark

108 actions6 DPAs

€4.1M

decreasing

Bulgaria

43 actions5 DPAs

€3.8M

stable

Belgium

154 actions13 DPAs

€3.5M

decreasing

Estonia

34 actions6 DPAs

€3.3M

decreasing

Romania

327 actions5 DPAs

€2.2M

decreasing

Cyprus

69 actions5 DPAs

€1.5M

stable

Iceland

65 actions1 DPA

€1.2M

stable

Latvia

20 actions2 DPAs

€943K

decreasing

Malta

14 actions1 DPA

€512K

stable

Luxembourg

43 actions6 DPAs

€498K

decreasing

Slovenia

32 actions6 DPAs

€268K

decreasing

Slovakia

10 actions6 DPAs

€50K

decreasing

Switzerland

3 actions1 DPA

€7K

stable

Liechtenstein

1 actions1 DPA

€4K

stable

European Union

68 actions1 DPA

€0

decreasing

Frequently Asked Questions About GDPR Enforcement by Country

Q:Which European country issues the most GDPR fines?

Spain (AEPD) consistently issues the highest volume of GDPR fines, while Ireland (DPC) and Luxembourg (CNPD) issue the largest individual penalties due to hosting major tech company headquarters. France (CNIL) leads in cookie-specific enforcement. Italy (Garante) is also among the top enforcers by both volume and total amount.

Q:How do GDPR enforcement approaches differ across European countries?

Enforcement approaches vary significantly. France's CNIL focuses heavily on cookie consent and Big Tech. Spain's AEPD issues many smaller fines across diverse sectors. Ireland's DPC handles cross-border cases for US tech giants. Germany has a federal structure with 16 state-level DPAs plus the BfDI. Nordic countries tend to favour corrective measures over large fines.

Q:Do non-EU countries enforce GDPR fines?

Yes. EEA countries (Norway, Iceland, Liechtenstein) enforce GDPR through the EEA Agreement. The UK enforces its own UK GDPR post-Brexit through the ICO. Switzerland has separate data protection laws (nDSG/FADP) enforced by the FDPIC. These non-EU enforcers are included in the Cookie Fines database.