GDPR Fines & Penalties 2026
Search published European fines, warnings, orders and court decisions with a confirmed EU GDPR legal basis. Cases whose applicable law has not yet been confirmed are excluded.
Selected coverage: Europe. Only published cases are included.
132 results · Showing 76–100
Benetton Group S.r.l.
Roma Capitale
Mas s.r.l.
TIM S.p.A.
Informatica Alto Adige Spa
Bolzano municipality
Azienda socio-sanitaria locale n. 1 di Sassari
Azienda ULSS n.5 Polesana
Azienda ULSS
Associazione Nazionale Magistrati
Azienda Ospedale-Università Padova
Eurosanità S.P.A.
Private individual
Azienda Ospedaliero-Universitaria Careggi di Firenze
Servizio Idrico Integrato S.c.p.a.
Alpha Exploration Co. Inc.
Alpha Exploration
Azienda Socio Sanitaria Territoriale Rhodense
Azienda sanitaria universitaria Friuli Occidentale
Azienda sanitaria universitaria Friuli Centrale
Azienda Socio Sanitaria Territoriale Dei Sette Laghi
Istituto Nazionale Assicurazione Infortuni sul Lavoro
ASST di Lodi
Tecnomed Trento s.r.l.
Azienda ospedaliera di Perugia
Frequently Asked Questions About GDPR Enforcement
Q:What types of GDPR enforcement actions exist?
GDPR enforcement actions include monetary fines (the most publicised), formal warnings, reprimands, processing bans, data erasure orders, and compliance orders. DPAs can also impose temporary or permanent limitations on data processing. Fines can reach up to EUR 20 million or 4% of annual worldwide turnover, whichever is higher, under Article 83(5) GDPR.
Q:How are GDPR fines calculated by data protection authorities?
DPAs consider factors listed in Article 83(2) GDPR: nature, gravity, and duration of the infringement; intentional or negligent character; actions taken to mitigate damage; degree of responsibility; previous infringements; degree of cooperation; categories of personal data affected; how the infringement became known; and adherence to approved codes of conduct or certification mechanisms.
Q:Can GDPR fines be appealed?
Yes, GDPR fines can be appealed through national courts. Many high-profile fines have been challenged. The appeals process varies by country. Some fines have been reduced on appeal (e.g., British Airways' fine was reduced from GBP 183 million to GBP 20 million), while others have been upheld or even increased.
Browse case links on this page
GDPR Enforcement Actions (132 total)
- Benetton Group S.r.l. (Italy) – €240K – Apr 2023
- Roma Capitale (Italy) – €176K – Apr 2023
- Mas s.r.l. (Italy) – €1.8M – Apr 2023
- TIM S.p.A. (Italy) – €7.6M – Apr 2023
- Informatica Alto Adige Spa (Italy) – €10K – Mar 2023
- Bolzano municipality (Italy) – €30K – Mar 2023
- Azienda socio-sanitaria locale n. 1 di Sassari (Italy) – €4K – Mar 2023
- Azienda ULSS n.5 Polesana (Italy) – €5K – Jan 2023
- Azienda ULSS (Italy) – €5K – Jan 2023
- Associazione Nazionale Magistrati (Italy) – €5K – Jan 2023
- Azienda Ospedale-Università Padova (Italy) – €5K – Jan 2023
- Eurosanità S.P.A. (Italy) – €120K – Dec 2022
- Private individual (Italy) – €1K – Nov 2022
- Azienda Ospedaliero-Universitaria Careggi di Firenze (Italy) – €9K – Oct 2022
- Servizio Idrico Integrato S.c.p.a. (Italy) – €15K – Oct 2022
- Alpha Exploration Co. Inc. (Italy) – €2.0M – Oct 2022
- Alpha Exploration (Italy) – €2.0M – Oct 2022
- Azienda Socio Sanitaria Territoriale Rhodense (Italy) – €3K – Jul 2022
- Azienda sanitaria universitaria Friuli Occidentale (Italy) – €50K – May 2022
- Azienda sanitaria universitaria Friuli Centrale (Italy) – €70K – May 2022
- Azienda Socio Sanitaria Territoriale Dei Sette Laghi (Italy) – €7K – May 2022
- Istituto Nazionale Assicurazione Infortuni sul Lavoro (Italy) – €50K – Apr 2022
- ASST di Lodi (Italy) – €1K – Apr 2022
- Tecnomed Trento s.r.l. (Italy) – €10K – Apr 2022
- Azienda ospedaliera di Perugia (Italy) – €40K – Apr 2022