20 biggest GDPR fines so far [2025] - Data Privacy Manager

Data Privacy Manager·January 24, 2020·fine

Companies Mentioned

Regulations Mentioned

Linked Fines

CompanyDateRegulationAmount (USD)Type
Google2025-09-01GDPR$135,000,000consent
Google2025-09-01GDPR$351,000,000consent
Criteo2023-06-15GDPR$43,200,000consent
Meta Platforms2023-05-22GDPR$1,296,000,000transfer
Meta Platforms2023-05-22GDPR$1,296,000,000Failure to implement sufficient measures to ensure information security
Meta Platforms2022-11-25GDPR$286,200,000Failure to implement sufficient measures to ensure information security
Meta Platforms2022-09-05GDPR$437,400,000children
Meta Platforms2022-09-05GDPR$437,400,000Failure to comply with data processing principles
Google2022-05-18GDPR$10,800,000Non-compliance with lawful basis for data processing
Google2022-01-06GDPR$10,800,000consent
Meta Platforms2022-01-04GDPR$421,200,000Failure to comply with data processing principles
Google2021-12-31GDPR$64,800,000Non-compliance with lawful basis for data processing
Google2021-12-31GDPR$97,200,000Non-compliance with lawful basis for data processing
Meta Platforms2021-09-02GDPR$243,000,000consent
Meta Platforms2021-09-02GDPR$243,000,000Non-compliance with lawful basis for data processing
Vodafone Italia S.p.A2020-11-12GDPR$13,231,729Multiple
Google2020-03-11GDPR$7,560,000Failure to comply with data processing principles
Google2019-01-21GDPR$54,000,000Several