Privacy Statistics & Trends 2026
Privacy enforcement statistics across 53 enforcement actions totalling €110.3M in 21 jurisdictions in Europe. Compare recorded fine amounts, trends and outcomes over time.
Data current as of 19 October 2026 · Updated daily
Frequently Asked Questions About Enforcement Statistics
Q:How are the GDPR totals calculated?
These statistics describe recorded penalties, not money collected. The GDPR selection includes only published European cases with a confirmed EU GDPR legal basis. Cookie or national-law cases are included in GDPR totals only when that EU GDPR basis is also confirmed.
Q:Are GDPR fines increasing or decreasing over time?
GDPR fines have generally been increasing both in total volume and average amount since 2018. The trend shows DPAs becoming more confident in imposing larger penalties. 2023 and 2024 saw record-breaking fines, particularly for Big Tech companies. Cookie consent fines specifically have accelerated as more DPAs prioritise ePrivacy enforcement.
Q:Which company has received the largest GDPR fine?
Meta (formerly Facebook) holds the record for the largest single GDPR fine at EUR 1.2 billion, imposed by Ireland's Data Protection Commission in May 2023 for transferring EU user data to the US. In the cookie consent space, the largest fines have been levied by France's CNIL against Google (EUR 150 million) and Amazon (EUR 35 million) for cookie violations.