EDPB Issues New Guidance on GDPR Administrative Fines and the DSA
The EDPB adopted new guidance on GDPR fines, corrective powers, and the interaction between the GDPR and the Digital Services Act.
sanctions
Norway Fines Microsoft-Owned Xandr Over Grindr User Data
Norway’s DPA fined Xandr €8.6 million for unlawfully processing Grindr users’ personal data and sexual-orientation data in real-time advertising without valid consent.
Spanish DPA Fines Securitas Direct €100,000 for Chargeable GDPR Hotline
The Spanish DPA fined Securitas Direct €100,000 for directing people to a chargeable phone number to exercise GDPR rights and ordered the company to replace its notices.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Irish DPC Fines Google €403 Million Over Location Tracking
Ireland’s DPC fined Google €403 million for GDPR breaches involving location data transparency, lawfulness, accountability, and retention.
Dutch DPA Fines Uber €824.99 Million for GDPR Violations
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
Telecom Italia Fined €9.5 Million for GDPR Violations in Telemarketing Scheme
Italy fines Telecom Italia €9.5 million for illegal telemarketing using spoofed calls and mandates strict reforms under GDPR enforcement.
Meta Looses in Court Over Potential €430 Million GDPR Fines
Meta lost a legal challenge allowing the Irish Data Protection Commission to impose fines up to €430 million for GDPR violations affecting millions of Facebook users.
Belgian Data Protection Authority turns to criminal courts for GDPR enforcement
The Belgian Data Protection Authority will use criminal courts to enforce GDPR rules after fines were often reduced by the Market Court.
Yango Faces €100 Million GDPR Fine for Sharing Personal Data Outside EU
The Dutch Data Protection Authority fined Yango’s parent company €100 million for inadequate protection of European users’ data transferred to Russia.
EDPB publishes annual report 2025
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
Court Annuls €746 Million GDPR Fine Against Amazon
Luxembourg’s High Administrative Court annulled Amazon’s €746 million GDPR fine over targeted advertising, requiring fault and proportionality reassessment by the CNPD.