Autoriteit Persoonsgegevens
Data protection authority of Netherlands
Total Actions
76
Total Fines
€867.6M
Average Fine
€14.0M
Among actions with fines
Enforcement Factor
2.20
Highly active
About Autoriteit Persoonsgegevens
The Autoriteit Persoonsgegevens is Netherlands's principal data protection regulator and one of Europe's most assertive enforcers of GDPR and ePrivacy rules. Autoriteit Persoonsgegevens has taken 76 enforcement actions resulting in €867,554,000 in total penalties, with an average fine of €14.0M per sanctioned entity. With an enforcement factor of 2.2, Autoriteit Persoonsgegevens ranks among Europe's most active GDPR and ePrivacy regulators, pursuing both large technology companies and smaller domestic businesses. Its most significant action was a €290,000,000 fine against Uber B.V. in 2024. Key enforcement areas include cookies placed before consent, pre-ticked consent boxes, reject harder than accept. The most frequently cited legal basis in Autoriteit Persoonsgegevens's decisions is Art. 6(1) GDPR and Art. 9(GDPR).
Largest Fines by Autoriteit Persoonsgegevens
View all actionsRecent Actions by Autoriteit Persoonsgegevens
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2018 | 1 | €50K |
| 2019 | 3 | €1.3M |
| 2020 | 12 | €4.6M |
| 2021 | 15 | €8.6M |
| 2022 | 6 | €5.9M |
| 2023 | 9 | €20.5M |
| 2024 | 13 | €620.8M |
| 2025 | 4 | €5.6M |
| 2026 | 13 | €200.3M |
Most Enforced Violations
Frequently Asked Questions
How many GDPR and ePrivacy actions has Autoriteit Persoonsgegevens issued?
Autoriteit Persoonsgegevens has issued 76 enforcement actions related to GDPR and ePrivacy, totaling €867.6M.
What is Autoriteit Persoonsgegevens's largest GDPR and ePrivacy fine?
The largest was a €290.0M fine against Uber B.V. on 2024-07-22.
What violations does Autoriteit Persoonsgegevens enforce most?
The most commonly enforced violations by Autoriteit Persoonsgegevens are cookies placed before consent, pre-ticked consent boxes, reject harder than accept.