# GDPR Fine: €20M or 4% Turnover, 63 DPA Decisions Indexed > Article 83 estimator plus every major DPA decision since May 2018. €5.6B total tracked. Sourced to published regulator decisions. Updated August 2026 ## Pages - [Home](https://gdprfine.com): Article 83 estimator plus every major DPA decision since May 2018. €5.6B total tracked. Sourced to published regulator decisions. Updated August 2026 - [About GDPRFine.com & Digital Signet](https://gdprfine.com/about): GDPRFine.com is operated by Digital Signet, an independent AI-development studio. About the operator, the editorial framework, and the source landscape - [How to Appeal a GDPR Fine, Process, Timelines & Success Rates 2026](https://gdprfine.com/appeals): Complete guide to appealing GDPR fines: Article 78 rights, step-by-step process, appeal timelines, grounds for appeal, and real outcomes. British Airways 89%... - [Article 32 GDPR Fines: Inadequate Security Enforcement](https://gdprfine.com/articles/article-32-security): Article 32 GDPR requires appropriate technical and organisational measures to ensure security of processing. Landmark fines (BA £20M, Marriott £18.4M, 1&1 €9.55M),... - [Article 5 GDPR Fines: Data Minimisation & Purpose Limitation Enforcement](https://gdprfine.com/articles/article-5-data-minimisation): Article 5 contains the GDPR's seven foundational principles, including data minimisation (5(1)(c)) and purpose limitation (5(1)(b)). Landmark fines, DPA interpretation, and defensive... - [Article 7 GDPR Fines: Consent & Cookie-Banner Enforcement](https://gdprfine.com/articles/article-7-consent-cookies): Article 7 GDPR governs the conditions for valid consent. Combined with ePrivacy Article 5(3) for cookies, it underlies most ad-tech enforcement. Google... - [Article 83 GDPR Fines: The Two Administrative-Fine Tiers Explained](https://gdprfine.com/articles/article-83-administrative-fines): Article 83 GDPR sets two administrative-fine tiers: the lower tier at 10 million euros or 2% of worldwide turnover (Art 83(4)) and... - [Articles 44-49 GDPR Fines: International Transfer Enforcement (Schrems II)](https://gdprfine.com/articles/articles-44-49-international-transfers): Chapter V of the GDPR governs international transfers of personal data. The Schrems II ruling (C-311/18) reshaped transfer compliance. Meta €1.2B, TikTok... - [GDPR Fines by Country, Which DPAs Fine the Most? 2026](https://gdprfine.com/by-country): Compare GDPR fines by country. See which supervisory authorities (DPAs) issue the most fines, total amounts by jurisdiction, and enforcement patterns across... - [GDPR Fines by Industry, Which Sectors Are Most Targeted? 2026](https://gdprfine.com/by-sector): Analysis of GDPR fines by industry sector: technology, finance, healthcare, telecom, retail, and more. Sector-specific risk profiles, common violations, and enforcement trends - [Amazon €746 Million CNPD Fine: 2021 Luxembourg Decision Explained](https://gdprfine.com/cases/amazon-746-million-cnpd-2021): Luxembourg's CNPD fined Amazon Europe Core S.à.r.l. €746 million in July 2021, the largest GDPR fine of its time. On 12 March... - [British Airways £20 Million ICO Fine: 2020 Decision Explained (Reduced from £183M)](https://gdprfine.com/cases/british-airways-20-million-ico-2020): The ICO fined British Airways £20 million in October 2020 for the 2018 data breach affecting 429,000 customers. Reduced from the £183M... - [Clearview AI €20 Million Garante Fine: 2022 Italian Decision Explained](https://gdprfine.com/cases/clearview-20-million-garante-2022): Italy's Garante fined Clearview AI €20 million in February 2022 for scraping facial images from European websites and building a biometric search... - [Google €150 Million CNIL Fine: 2022 Cookie Banner Decision Explained](https://gdprfine.com/cases/google-90-million-cnil-2022): France's CNIL fined Google LLC €150 million in January 2022 over cookie banner UX. Refusing cookies was harder than accepting them, violating... - [Instagram €405 Million DPC Fine: 2022 Children's Data Decision Explained](https://gdprfine.com/cases/instagram-405-million-dpc-2022): Meta Platforms Ireland was fined €405 million in September 2022 over the public-by-default visibility of teenage business-account contact details. Articles 5, 6,... - [LinkedIn €310 Million DPC Fine: 2024 Behavioural-Advertising Decision Explained](https://gdprfine.com/cases/linkedin-310-million-dpc-2024): LinkedIn Ireland was fined €310 million by the Irish DPC in October 2024 for processing member data for behavioural analysis and targeted... - [Marriott £18.4 Million ICO Fine: 2020 Starwood Breach Decision Explained](https://gdprfine.com/cases/marriott-18-million-ico-2020): The ICO fined Marriott £18.4 million in October 2020 for the Starwood guest-data breach affecting up to 339 million records. Reduced from... - [Meta €1.2 Billion DPC Fine: 2023 EU-US Data Transfer Decision Explained](https://gdprfine.com/cases/meta-1-2-billion-dpc-2023): The largest GDPR fine ever issued. Meta Ireland was fined €1.2 billion by the Irish DPC in May 2023 for transferring EU... - [Meta €265 Million DPC Fine: 2022 Facebook Data-Scraping Decision Explained](https://gdprfine.com/cases/meta-265-million-dpc-2022): Meta was fined €265 million by the Irish DPC in November 2022 over the Facebook data-scraping incident, for failing to apply Data... - [OpenAI €15 Million Garante Fine (2024): Annulled by the Court of Rome](https://gdprfine.com/cases/openai-15-million-garante-2024): Italy's Garante fined OpenAI €15 million in November 2024 over ChatGPT (no legal basis for training, transparency and age-verification failures, unnotified 2023... - [TikTok €345 Million DPC Fine: 2023 Children's Data Decision Explained](https://gdprfine.com/cases/tiktok-345-million-dpc-2023): Ireland's DPC fined TikTok €345 million in September 2023 over default settings, age verification and visibility controls for under-13 and under-16 accounts.... - [TikTok €530 Million DPC Fine: 2025 China Transfer Decision Explained](https://gdprfine.com/cases/tiktok-530-million-dpc-2025): Ireland's DPC fined TikTok €530 million in May 2025 for transferring European user data to staff in China without verifying equivalent protection... - [Uber €290 Million Dutch DPA Fine: 2024 Driver-Data Transfer Decision Explained](https://gdprfine.com/cases/uber-290-million-ap-2024): Uber was fined €290 million by the Dutch DPA (Autoriteit Persoonsgegevens) in 2024 for transferring EU drivers' personal data to the United... - [WhatsApp €225 Million DPC Fine: 2021 Transparency Decision Explained](https://gdprfine.com/cases/whatsapp-225-million-dpc-2021): Ireland's DPC fined WhatsApp Ireland €225 million in September 2021 for transparency failures under Articles 12-14 GDPR. The EDPB Article 65 binding... - [GDPR Compliance Cost vs Fine Cost, The Business Case for Privacy 2026](https://gdprfine.com/compliance-vs-fines): GDPR compliance cost breakdown by company size. Compare compliance investment to fine exposure with real data. Interactive ROI calculator. Updated 2026 - [Belgian APD GDPR Fines: Enforcement Record & IAB Europe Case](https://gdprfine.com/dpa/belgium-apd): Belgium's Autorité de Protection des Données enforces the GDPR with the landmark IAB Europe TCF decision (2022) on programmatic-advertising consent architecture. Profile,... - [French CNIL GDPR Fines: Enforcement Record & Cookie Cases](https://gdprfine.com/dpa/france-cnil): France's CNIL is Europe's leading cookie-banner and ad-tech enforcement authority. Profile, fining philosophy, headline decisions (Google €150M, Microsoft €60M, Meta €60M), Article... - [German BfDI + State DPAs GDPR Fines: Federated Enforcement Explained](https://gdprfine.com/dpa/germany-bfdi): Germany's data protection enforcement is federated across the BfDI (federal regulator) and 17 state DPAs. Profile, headline cases (H&M €35M Hamburg, 1&1... - [Irish Data Protection Commission (DPC) GDPR Fines: Enforcement Record](https://gdprfine.com/dpa/ireland-dpc): Ireland's DPC is the most-fined GDPR regulator by total amount, due to Big Tech entities being established in Ireland. Profile, fining philosophy,... - [Italian Garante GDPR Fines: Enforcement Record & AI Cases](https://gdprfine.com/dpa/italy-garante): Italy's Garante is Europe's most AI-and-biometric forward DPA. ChatGPT temporary block (2023), Replika ban (2023), Clearview €20M (2022). Profile, philosophy, headline decisions... - [Dutch Autoriteit Persoonsgegevens (AP) GDPR Fines: Enforcement Record](https://gdprfine.com/dpa/netherlands-ap): The Netherlands' Autoriteit Persoonsgegevens enforces the GDPR with particular focus on public-sector processing, employment data, and the post-Belastingdienst political accountability for algorithmic... - [Spanish AEPD GDPR Fines: Enforcement Record (Highest Decision Volume)](https://gdprfine.com/dpa/spain-aepd): Spain's AEPD issues the highest volume of GDPR decisions of any EU DPA. Profile, philosophy, headline cases, and the SMB-fine distribution that... - [UK ICO Post-Brexit Fines: UK GDPR Enforcement Record](https://gdprfine.com/dpa/uk-ico): The UK Information Commissioner's Office enforces the UK GDPR post-Brexit. British Airways £20M (2020), Marriott £18.4M (2020), TikTok UK £12.7M (2023), Clearview... - [Every Major GDPR Fine - Searchable Decision Register](https://gdprfine.com/fines): Searchable register of every major GDPR fine since May 2018, sourced to the issuing supervisory authority. Filter by country, violation, year, and... - [How GDPR Fines Are Calculated, Article 83 Explained](https://gdprfine.com/how-fines-are-calculated): Complete guide to GDPR fine calculation under Article 83. Understand the two-tier system, 10 assessment criteria, mitigating factors, and see real calculation... - [Methodology: GDPRFine.com](https://gdprfine.com/methodology): Sources, refresh discipline, and editorial position for GDPRFine.com. An independent reference for GDPR enforcement: published fines, regulator decisions, fine calculation methodology and... - [GDPR Fine Statistics, 8 Years of Enforcement Data 2026](https://gdprfine.com/statistics): Comprehensive GDPR enforcement statistics including fines by year, country, violation type, and industry sector. Charts, trend analysis, and key insights. Updated April... - [GDPR Fines by Violation Type, Consent, Data Breach, Transfers & More 2026](https://gdprfine.com/violations): Explore GDPR fines by violation type: consent violations, data breaches, cross-border transfers, inadequate security, unlawful processing, and DPO failures. Real cases and... --- *Generated 2026-08-26 from GDPR Fine: €20M or 4% Turnover, 63 DPA Decisions Indexed site source.*