GDPR Fines in United Kingdom

About Data Protection Enforcement in United Kingdom

United Kingdom is a major enforcement jurisdiction for GDPR and ePrivacy violations, with 11 data protection authorities overseeing compliance since 2013. To date, United Kingdom's regulators have taken 142 enforcement actions totaling €191,870,662 in fines. The landmark case was a €23,400,000 fine against British Airways in 2020, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has moderated in recent years, potentially indicating improved compliance across the market or a shift in regulatory priorities. The most frequently enforced violations are cookies placed before consent (12 cases), third-party cookies without consent (8 cases), unclear cookie information (3 cases), reflecting the regulatory focus areas in this jurisdiction.