GDPR Fines & Penalties 2026
Search published European fines, warnings, orders and court decisions with a confirmed EU GDPR legal basis. Cases whose applicable law has not yet been confirmed are excluded.
Selected coverage: Europe. Only published cases are included.
26 results · Showing 1–25
Ekdotikos Oikos Dias Dimosia Ltd
Bank of Cyprus Public Company Limited
Senira Limited
Brivio Limited
Aylo Social LTD
Physician
Open University of Cyprus
NAGA Markets Europe Ltd
Epic Ltd.
Πολίτης newspaper
English School Cyprus
English School staff union (ESSA)
Εκδοτικού Οίκου Δίας
WS WiSpear Systems Ltd
Mediterranean Hospital of Cyprus
Electricity Authority of Cyprus
Cypriot Real Estate Registration Authority
Hellenic Bank
Cyprus Police
Bank of Cyprus Public Company Ltd
Grant Ideas Ltd
eShop for Sports (M.L. PRO.FIT SOLUTIONS LTD)
Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd
Frequently Asked Questions About GDPR Enforcement
Q:What types of GDPR enforcement actions exist?
GDPR enforcement actions include monetary fines (the most publicised), formal warnings, reprimands, processing bans, data erasure orders, and compliance orders. DPAs can also impose temporary or permanent limitations on data processing. Fines can reach up to EUR 20 million or 4% of annual worldwide turnover, whichever is higher, under Article 83(5) GDPR.
Q:How are GDPR fines calculated by data protection authorities?
DPAs consider factors listed in Article 83(2) GDPR: nature, gravity, and duration of the infringement; intentional or negligent character; actions taken to mitigate damage; degree of responsibility; previous infringements; degree of cooperation; categories of personal data affected; how the infringement became known; and adherence to approved codes of conduct or certification mechanisms.
Q:Can GDPR fines be appealed?
Yes, GDPR fines can be appealed through national courts. Many high-profile fines have been challenged. The appeals process varies by country. Some fines have been reduced on appeal (e.g., British Airways' fine was reduced from GBP 183 million to GBP 20 million), while others have been upheld or even increased.
Browse case links on this page
GDPR Enforcement Actions (26 total)
- Ekdotikos Oikos Dias Dimosia Ltd (Cyprus) – court ruling – May 2026
- Bank of Cyprus Public Company Limited (Cyprus) – €25K – Aug 2025
- Senira Limited (Cyprus) – €3K – Sept 2024
- Brivio Limited (Cyprus) – €2K – Feb 2024
- Aylo Social LTD (Cyprus) – €2K – Feb 2024
- Physician (Cyprus) – €2K – Dec 2023
- Open University of Cyprus (Cyprus) – €45K – Nov 2023
- NAGA Markets Europe Ltd (Cyprus) – €9K – May 2023
- Epic Ltd. (Cyprus) – €3K – Feb 2023
- Πολίτης newspaper (Cyprus) – €7K – Jan 2023
- English School Cyprus (Cyprus) – €4K – Mar 2022
- English School staff union (ESSA) (Cyprus) – €5K – Mar 2022
- Εκδοτικού Οίκου Δίας (Cyprus) – €10K – Feb 2022
- WS WiSpear Systems Ltd (Cyprus) – €925K – Nov 2021
- Mediterranean Hospital of Cyprus (Cyprus) – €10K – Sept 2021
- Electricity Authority of Cyprus (Cyprus) – €40K – Mar 2021
- Cypriot Real Estate Registration Authority (Cyprus) – €10K – Mar 2021
- Hellenic Bank (Cyprus) – €25K – Mar 2021
- Cyprus Police (Cyprus) – €6K – Oct 2020
- Bank of Cyprus Public Company Ltd (Cyprus) – €15K – Oct 2020
- Grant Ideas Ltd (Cyprus) – €1K – Oct 2020
- eShop for Sports (M.L. PRO.FIT SOLUTIONS LTD) (Cyprus) – €1K – Jan 2020
- Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance (Cyprus) – €9K – Jan 2020
- LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (Cyprus) – €2K – Oct 2019
- LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (Cyprus) – €10K – Oct 2019