Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2026-02-01 | NL Municipalities (x10) | €250K | GDPR | Netherlands AP | Netherlands | consent | Unlawful processing of religious data by 10 Dutch municipalities.Unlawful processing of religious data by 10 Dutch municipalities. Articles: Art. 5, Art. 9 |
| 2026-02-01 | NL Municipalities (x10) | €250K | GDPR | Netherlands AP | Netherlands | other | Unlawful processing of religious data |
| 2025-12-01 | Disney | $10.0M | COPPA | FTC | United States | children | Failed to manage YouTube channels used by children in compliance with COPPA. |
| 2025-09-15 | Dun & Bradstreet/Duns | $5.7M | FTC Act Section 5 | FTC | United States | data_broker | Data broker settlement for unfair and deceptive practices in selling consumer da...Data broker settlement for unfair and deceptive practices in selling consumer data. |
| 2025-09-01 | €125.0M | GDPR | France CNIL | France | consent | Cookie consent failures at account creation.Cookie consent failures at account creation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | €125.0M | GDPR | France CNIL | France | consent | Cookie consent failures at account creation.Cookie consent failures at account creation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | Google LLC | €325.0M | GDPR | France CNIL | France | consent | Gmail ads without consent; cookie manipulation |
| 2025-09-01 | SHEIN | €150.0M | GDPR | France CNIL | France | consent | Placing cookies without consent and non-functional opt-outs.Placing cookies without consent and non-functional opt-outs. Articles: Art. 5, Art. 6 |
| 2025-09-01 | €325.0M | GDPR | France CNIL | France | consent | Gmail ads without consent and cookie manipulation.Gmail ads without consent and cookie manipulation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | Google Ireland | €125.0M | GDPR | France CNIL | France | consent | Cookie consent failures at account creation |
| 2025-09-01 | €325.0M | GDPR | France CNIL | France | consent | Gmail ads without consent and cookie manipulation.Gmail ads without consent and cookie manipulation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | SHEIN | €150.0M | GDPR | France CNIL | France | consent | Placing cookies without consent and non-functional opt-outs.Placing cookies without consent and non-functional opt-outs. Articles: Art. 5, Art. 6 |
| 2025-09-01 | SHEIN | €150.0M | GDPR | France CNIL | France | consent | Placing cookies without consent; non-functional opt-outs |
| 2025-05-02 | TikTok | €530.0M | GDPR | Ireland DPC | Ireland | transfer | Illegal data transfers to China and failure to be transparent about data process...Illegal data transfers to China and failure to be transparent about data processing. Articles: Art. 46(1), Art. 5(1)(a) |
| 2025-05-01 | TikTok | €530.0M | GDPR | Ireland DPC | Ireland | transfer | Illegal data transfers to China and failure to be transparent about data process...Illegal data transfers to China and failure to be transparent about data processing. Articles: Art. 46(1), Art. 5(1)(a) |
| 2025-05-01 | TikTok | €530.0M | GDPR | Ireland DPC | Ireland | transfer | Illegal data transfers to China |
| 2025-03-01 | Replika (Luka Inc.) | €5.0M | GDPR | Italy Garante | Italy | consent | AI chatbot GDPR violations.AI chatbot GDPR violations. Articles: Art. 5, Art. 6 |
| 2025-01-15 | HoganWillig/Genshin Impact (Cognosphere) | $20.0M | COPPA | FTC | United States | children | Genshin Impact developer settled FTC charges of collecting data from children wi...Genshin Impact developer settled FTC charges of collecting data from children without consent. |
| 2025-01-15 | Vodafone Germany | €45.0M | GDPR | Germany BfDI | Germany | data_breach | Vendor security failures and inadequate data controls.Vendor security failures and inadequate data controls. Articles: Art. 32 |
| 2025-01-01 | ING Bank Śląski | €4.4M | GDPR | Poland UODO | Poland | other | Unlawful scanning of customer ID documents |
| 2025-01-01 | Replika (Luka Inc.) | €5.0M | GDPR | Italy Garante | Italy | other | AI chatbot GDPR violations |
| 2025-01-01 | Vodafone Germany | €45.0M | GDPR | Germany BfDI | Germany | data_breach | Vendor security failures; inadequate data controls |
| 2025-01-01 | Vodafone Germany | €45.0M | GDPR | Germany BfDI | Germany | data_breach | Vendor security failures and inadequate data controls.Vendor security failures and inadequate data controls. Articles: Art. 32 |
| 2025-01-01 | Replika (Luka Inc.) | €5.0M | GDPR | Italy Garante | Italy | consent | AI chatbot GDPR violations.AI chatbot GDPR violations. Articles: Art. 5, Art. 6 |
| 2025-01-01 | Poczta Polska | €6.3M | GDPR | Poland UODO | Poland | other | Illegal processing of 30M citizens' data |