Art. 32(1) GDPR
GDPR and ePrivacy enforcement actions citing this article.
Actions
249
Total Fines
€161.5M
Average Fine
€878K
Countries
26
Enforcement Under Art. 32(1) GDPR
Art. 32(1) GDPR has been cited in 249 European data-protection enforcement actions. These actions have resulted in fines totaling €161.5M, with an average fine of €878K. Enforcement is spread across 26 countries, with Poland being the most active enforcer.
Largest Fines Citing Art. 32(1) GDPR
Recent Enforcement
Enforcement by Country
| Country | Actions | Total Fines |
|---|---|---|
| 🇵🇱 Poland | 38 | €7.1M |
| 🇸🇪 Sweden | 35 | €19.4M |
| 🇩🇰 Denmark | 32 | €0 |
| 🇮🇪 Ireland | 22 | €94.5M |
| 🇷🇴 Romania | 20 | €384K |
| 🇪🇸 Spain | 16 | €879K |
| 🇩🇪 Germany | 12 | €509K |
| 🇬🇧 United Kingdom | 12 | €17.8M |
| 🇳🇱 Netherlands | 10 | €5.8M |
| 🇮🇹 Italy | 8 | €3.1M |
| 🇫🇮 Finland | 8 | €8.1M |
| 🇬🇷 Greece | 6 | €408K |
| 🇭🇺 Hungary | 4 | €782K |
| 🇧🇪 Belgium | 4 | €3K |
| 🇳🇴 Norway | 4 | €1.8M |
| 🇱🇺 Luxembourg | 3 | €10K |
| 🇨🇾 Cyprus | 3 | €7K |
| 🇭🇷 Croatia | 2 | €15K |
| 🇲🇹 Malta | 2 | €315K |
| 🇫🇷 France | 2 | €650K |
| 🇮🇸 Iceland | 1 | €0 |
| 🇦🇹 Austria | 1 | €0 |
| 🇪🇺 European Union | 1 | €0 |
| 🇪🇪 Estonia | 1 | €0 |
| 🇨🇿 Czech Republic | 1 | €387 |
| 🇸🇰 Slovakia | 1 | €0 |
Enforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 3 | €581K |
| 2020 | 31 | €10.7M |
| 2021 | 34 | €4.7M |
| 2022 | 50 | €7.3M |
| 2023 | 37 | €6.8M |
| 2024 | 33 | €104.0M |
| 2025 | 38 | €22.2M |
| 2026 | 23 | €5.3M |
Commonly Co-Cited Articles
Frequently Asked Questions
How many enforcement actions cite Art. 32(1) GDPR?
European data protection authorities have cited Art. 32(1) GDPR in 249 enforcement actions, resulting in fines totaling €161.5M.
What is the average fine for Art. 32(1) GDPR violations?
The average fine for enforcement actions citing Art. 32(1) GDPR is €878K, though amounts vary significantly based on the severity and scope of the violation.
Which countries enforce Art. 32(1) GDPR most?
The most active countries in enforcing Art. 32(1) GDPR are Poland, Sweden, Denmark.
Which GDPR articles are commonly cited alongside Art. 32(1) GDPR?
Art. 32(1) GDPR is most frequently cited together with Art. 5(1)(f) GDPR, Art. 25(1) GDPR, Art. 32(2) GDPR.