GDPR Fines & Penalties 2026
Search published European fines, warnings, orders and court decisions with a confirmed EU GDPR legal basis. Cases whose applicable law has not yet been confirmed are excluded.
Selected coverage: Europe. Only published cases are included.
227 results · Showing 126–150
Hearst Magazine Media, Inc.
No Reject Button · Third-Party Cookies Without Consent
Garante per la Protezione dei Dati Personali
GFB One s.r.l.
RCS Mediagroup S.p.a
Associazione ContiamoCI! ETS
Pre-ticked Consent Boxes
GLOBAL KAPITAL GROUP SPAIN, S.L
Tiscali Italia S.p.A.
Azienda Ospedaliera Universitaria Careggi
Municipality of Modica
Tele2 Sverige
Dagens Industri Aktiebolag
Coop Sverige AB
Magdeburg Administrative Court
Bonnier News AB
Court case 93 O 167/20
Third-Party Cookies Without Consent · Unclear Cookie Information
Nationale Maatschappij der Belgische Sporen (NMBS)
Istituto Nazionale di Statistica
Rinascente
www.heise.de
Cookies Placed Before Consent · Unclear Cookie Information
Doctissimo
Cookies Placed Before Consent · Cookies Persist After Rejection
Ilmatieteenlaitos
Ordine degli avvocati di Ancona
Der Standard
No Granular Cookie Choice
Verbraucherzentrale NRW e.V., Beratungsstelle Köln
Misleading Banner Messaging
Frequently Asked Questions About GDPR Enforcement
Q:What types of GDPR enforcement actions exist?
GDPR enforcement actions include monetary fines (the most publicised), formal warnings, reprimands, processing bans, data erasure orders, and compliance orders. DPAs can also impose temporary or permanent limitations on data processing. Fines can reach up to EUR 20 million or 4% of annual worldwide turnover, whichever is higher, under Article 83(5) GDPR.
Q:How are GDPR fines calculated by data protection authorities?
DPAs consider factors listed in Article 83(2) GDPR: nature, gravity, and duration of the infringement; intentional or negligent character; actions taken to mitigate damage; degree of responsibility; previous infringements; degree of cooperation; categories of personal data affected; how the infringement became known; and adherence to approved codes of conduct or certification mechanisms.
Q:Can GDPR fines be appealed?
Yes, GDPR fines can be appealed through national courts. Many high-profile fines have been challenged. The appeals process varies by country. Some fines have been reduced on appeal (e.g., British Airways' fine was reduced from GBP 183 million to GBP 20 million), while others have been upheld or even increased.
Browse case links on this page
GDPR Enforcement Actions (227 total)
- Hearst Magazine Media, Inc. (Austria) – complaint upheld – Sept 2023 | No Reject Button, Third-Party Cookies Without Consent
- Garante per la Protezione dei Dati Personali (Italy) – court ruling – Sept 2023
- GFB One s.r.l. (Italy) – €90K – Sept 2023
- RCS Mediagroup S.p.a (Italy) – €10K – Aug 2023
- Associazione ContiamoCI! ETS (Italy) – complaint upheld – Aug 2023
- LinkedIn (Germany) – court ruling – Aug 2023 | Pre-ticked Consent Boxes
- GLOBAL KAPITAL GROUP SPAIN, S.L (Spain) – complaint upheld – Aug 2023
- Tiscali Italia S.p.A. (Italy) – €100K – Jul 2023
- Azienda Ospedaliera Universitaria Careggi (Italy) – violation found – Jul 2023
- Municipality of Modica (Italy) – €10K – Jul 2023
- Tele2 Sverige (Sweden) – €1.1M – Jun 2023
- Dagens Industri Aktiebolag (Sweden) – complaint upheld – Jun 2023
- Coop Sverige AB (Sweden) – complaint upheld – Jun 2023
- Magdeburg Administrative Court (Germany) – court ruling – Jun 2023
- Bonnier News AB (Sweden) – €1.1M – Jun 2023
- Court case 93 O 167/20 (Germany) – court ruling – Jun 2023 | Third-Party Cookies Without Consent, Unclear Cookie Information
- Nationale Maatschappij der Belgische Sporen (NMBS) (Belgium) – court ruling – Jun 2023
- Istituto Nazionale di Statistica (Italy) – violation found – Jun 2023
- Rinascente (Italy) – €300K – Jun 2023
- www.heise.de (Germany) – complaint upheld – May 2023 | Cookies Placed Before Consent, Unclear Cookie Information
- Doctissimo (France) – €380K – May 2023 | Cookies Placed Before Consent, Cookies Persist After Rejection
- Ilmatieteenlaitos (Finland) – violation found – Apr 2023
- Ordine degli avvocati di Ancona (Italy) – €20K – Apr 2023
- Der Standard (Austria) – complaint upheld – Mar 2023 | No Granular Cookie Choice
- Verbraucherzentrale NRW e.V., Beratungsstelle Köln (Germany) – court ruling – Mar 2023 | Misleading Banner Messaging