GDPR Fines in Czech Republic

About Data Protection Enforcement in Czech Republic

Czech Republic is an active enforcer of GDPR and ePrivacy requirements, with 4 data protection authorities overseeing compliance since 2014. To date, Czech Republic's regulators have taken 83 enforcement actions totaling €28,514,795 in fines. The landmark case was a €14,040,000 fine against Avast Software, s.r.o. in 2024, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has maintained a consistent pace, reflecting a steady regulatory approach to GDPR and ePrivacy oversight. The most frequently enforced violations are cookies placed before consent (5 cases), third-party cookies without consent (4 cases), misleading banner messaging (2 cases), reflecting the regulatory focus areas in this jurisdiction.