Art. 25(GDPR)
Cookie consent and ePrivacy enforcement actions citing this article.
Actions
158
Total Fines
€606.5M
Average Fine
€4.9M
Countries
19
Enforcement Under Art. 25(GDPR)
Art. 25(GDPR) has been cited in 158 European enforcement actions related to cookie consent and data protection. These actions have resulted in fines totaling €606.5M, with an average fine of €4.9M. Enforcement is spread across 19 countries, with Italy being the most active enforcer.
Largest Fines Citing Art. 25(GDPR)
Recent Enforcement
Enforcement by Country
| Country | Actions | Total Fines |
|---|---|---|
| 🇮🇹 Italy | 85 | €227.4M |
| 🇪🇸 Spain | 18 | €27.4M |
| 🇧🇪 Belgium | 11 | €458K |
| 🇬🇷 Greece | 6 | €395K |
| 🇷🇴 Romania | 6 | €90K |
| 🇮🇸 Iceland | 5 | €224K |
| 🇫🇮 Finland | 5 | €12K |
| 🇭🇺 Hungary | 5 | €168K |
| 🇫🇷 France | 3 | €5.3M |
| 🇩🇪 Germany | 3 | €0 |
| 🇳🇱 Netherlands | 2 | €0 |
| 🇮🇪 Ireland | 2 | €345.0M |
| 🇸🇮 Slovenia | 1 | €5K |
| 🇧🇬 Bulgaria | 1 | €0 |
| 🇨🇾 Cyprus | 1 | €0 |
| 🇩🇰 Denmark | 1 | €0 |
| 🇱🇺 Luxembourg | 1 | €0 |
| 🇸🇪 Sweden | 1 | €0 |
| 🇦🇹 Austria | 1 | €0 |
Enforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 4 | €218K |
| 2020 | 13 | €62.1M |
| 2021 | 33 | €15.1M |
| 2022 | 16 | €878K |
| 2023 | 23 | €355.1M |
| 2024 | 29 | €127.7M |
| 2025 | 26 | €14.7M |
| 2026 | 14 | €30.7M |
Commonly Co-Cited Articles
Frequently Asked Questions
How many enforcement actions cite Art. 25(GDPR)?
European data protection authorities have cited Art. 25(GDPR) in 158 enforcement actions, resulting in fines totaling €606.5M.
What is the average fine for Art. 25(GDPR) violations?
The average fine for enforcement actions citing Art. 25(GDPR) is €4.9M, though amounts vary significantly based on the severity and scope of the violation.
Which countries enforce Art. 25(GDPR) most?
The most active countries in enforcing Art. 25(GDPR) are Italy, Spain, Belgium.
Which GDPR articles are commonly cited alongside Art. 25(GDPR)?
Art. 25(GDPR) is most frequently cited together with Art. 32(GDPR), Art. 13(GDPR), Art. 24(GDPR).