GDPR Fines and Data Breach Survey 2025
The DLA Piper GDPR Fines and Data Breach Survey 2025 provides valuable insights into the enforcement landscape of the GDPR over the past year.
sanctions
GDPR Fines Drop in 2024: Activists Demand Stronger Enforcement
European data protection fines fell to €1.2 billion in 2024; activists claim enforcement is weak, with only 1.3% of cases fined, urging stricter personal accountability under GDPR.
Ireland Imposes Over Half of Europe’s GDPR Fines in 2024
Ireland imposed over half of Europe’s GDPR fines in 2024, totaling €3.5 billion since 2018, with a notable decline in penalties compared to previous years.
Meta Appeals €91 Million GDPR Fine
Meta challenges a €91 million fine from Ireland’s DPC for improperly storing user passwords, claiming the penalty is excessive and misapplied under GDPR.
OpenAI Fined €15 Million for GDPR Violations in Italy
The Italian Data Protection Authority fined OpenAI €15 million for using personal data without legal grounds and lacking age verification for ChatGPT.
Netflix Fined €4.75 Million for Insufficient Transparency
The Dutch DPA fines Netflix €4.75 million for inadequate customer information on personal data handling, violating GDPR regulations.
DPC Fines Meta €251 Million for Facebook Data Breach
Meta faces a €251 million fine from the DPC for a data breach affecting 29 million accounts, with plans to appeal the decision.
Irish DPA collected only €19.9 million from €3.26 billion of GDPR fines
The Data Protection Commission has collected only €19.9 million of the €3.26 billion in fines imposed over five years, with many cases under appeal.
Orange Fined €50 Million for GDPR Violations in France
CNIL fines Orange S.A. €50 million for sending unsolicited ads and misusing user consent for tracking cookies, highlighting GDPR compliance issues.
WhatsApp Appeals €225 Million GDPR Fine to EU’s Top Court
WhatsApp appeals a €225 million fine at the CJEU, challenging the EDPB’s decision over alleged GDPR violations related to user data transparency.
LinkedIn Fined €310 Million for Misusing Personal Data
LinkedIn has been fined €310 million by Ireland’s DPC for violating GDPR by misusing personal data for targeted advertising without valid consent.
TikTok Sets Aside €1 Billion for Future Fines
Bytedance faces legal challenges and fines in Europe and the U.S. over TikTok’s data handling and design, setting aside €1 billion for potential penalties.