GDPR Fines in United Kingdom

About Data Protection Enforcement in United Kingdom

United Kingdom is a major enforcement jurisdiction for GDPR and ePrivacy violations, with 11 data protection authorities overseeing compliance since 2013. To date, United Kingdom's regulators have taken 140 enforcement actions totaling €154,561,062 in fines. The landmark case was a €23,400,000 fine against British Airways in 2020, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has maintained a consistent pace, reflecting a steady regulatory approach to GDPR and ePrivacy oversight. The most frequently enforced violations are cookies placed before consent (11 cases), third-party cookies without consent (8 cases), unclear cookie information (3 cases), reflecting the regulatory focus areas in this jurisdiction.