Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

698 fines found

Total: $7.9B

DateCompanyFineRegulationAuthorityCountryTypeSummary
2023-05-12data transfers from the EU/EEA to the US by Meta Platforms Ireland Limited for its Facebook service€1.2BGDPRIreland DPCIrelandother
This inquiry examined the basis upon which Meta Platforms Ireland Limited (“Meta...

This inquiry examined the basis upon which Meta Platforms Ireland Limited (“Meta Ireland”) transfers personal data from the EU/EEA to the US in connection with the delivery of its Facebook…

Articles: Art. 58

2021-07-01Amazon Europe€746.0MGDPRLuxembourg CNPDLuxembourgconsent
Targeted advertising without valid consent
2024-10-22LinkedIn Ireland Unlimited Company€620.0MGDPRIreland DPCIrelandother
This Decision concerns an Inquiry by the Data Protection Commission (the DPC) in...

This Decision concerns an Inquiry by the Data Protection Commission (the DPC) into LinkedIn Ireland Unlimited Company (LinkedIn), a data controller with its main establishment in…

Articles: Art. 5, Art. 6, Art. 14, Art. 13

2025-04-30TikTok Technology Limited€530.0MGDPRIreland DPCIrelandother
On 30 April 2025, the Irish Data Protection Commission (the ‘DPC’) adopted a fin...

On 30 April 2025, the Irish Data Protection Commission (the ‘DPC’) adopted a final decision in an own-volition statutory inquiry, concerning TikTok Technology Limited’s (‘TikTok’) transfers…

Articles: Art. 46, Art. 13

2024-12-12Meta Platforms Ireland Limited€502.0MGDPRIreland DPCIrelandother
On 12 December 2024, the Irish Data Protection Commission (‘DPC’) adopted final ...

On 12 December 2024, the Irish Data Protection Commission (‘DPC’) adopted final decisions in two own-volition statutory inquiries reprimanding Meta Platforms Ireland Limited (‘MPIL’) and…

Articles: Art. 25, Art. 33

2022-09-02processing of personal data relating to child users of the Instagram social networking service€405.0MGDPRIreland DPCIrelandother
The DPC commenced this own-volition inquiry on 21 September 2020, based both on ...

The DPC commenced this own-volition inquiry on 21 September 2020, based both on information provided by a third party, and in connection with processing identified by the DPC itself. The…

Articles: Art. 5, Art. 6, Art. 12, Art. 24, Art. 25, Art. 35

2022-12-31Meta Platforms Ireland Limited€390.0MGDPRIreland DPCIrelandother
These two inquiries relate to the data processing operations of Meta Platforms I...

These two inquiries relate to the data processing operations of Meta Platforms Ireland Limited (“Meta Ireland”) in connection with the delivery of its Facebook and Instagram services. (Meta…

Articles: Art. 5, Art. 6, Art. 12, Art. 13

2025-09-01SOCIETE DEVELOPPANT PLUSIEURS SERVICES EN LIGNE€325.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Information et consentement (cookies); Consentement des personnes (prospection c...

Information et consentement (cookies); Consentement des personnes (prospection commerciale par voie électronique - L. 34-5 CPCE)

2023-09-01TikTok Technology Limited€345.0MGDPRIreland DPCIrelandother
The Data Protection Commission (DPC) adopted its final decision regarding its in...

The Data Protection Commission (DPC) adopted its final decision regarding its inquiry into TikTok Technology Limited (TTL) on 1 September 2023. This own-volition inquiry sought to examine…

Articles: Art. 5, Art. 24, Art. 25

2024-08-01Uber€290.0MGDPRNetherlands APNetherlandstransfer
Driver data transferred to US without safeguards
2021-08-20WhatsApp Ireland Ltd€225.0MGDPRIreland DPCIrelandother
This inquiry, which was commenced by the Data Protection Commission (DPC) on 10 ...

This inquiry, which was commenced by the Data Protection Commission (DPC) on 10 December 2018, examined whether WhatsApp Ireland Ltd had discharged its GDPR transparency obligations with…

Articles: Art. 5, Art. 13

2022-11-25Meta Dataset€265.0MGDPRIreland DPCIrelandother
On 25 November 2022, the Data Protection Commission (the DPC) adopted a decision...

On 25 November 2022, the Data Protection Commission (the DPC) adopted a decision to impose a fine of €265 million and to exercise other corrective powers on Meta Platforms Ireland Limited …

Articles: Art. 25

2023-01-12WhatsApp Ireland Ltd€230.5MGDPRIreland DPCIrelandother
This inquiry relates to the processing carried out by WhatsApp Ireland Limited (...

This inquiry relates to the processing carried out by WhatsApp Ireland Limited (“WhatsApp Ireland”) in connection with the delivery of its WhatsApp service, in which the DPC has fined…

Articles: Art. 6, Art. 12, Art. 13

2024-09-26Meta Platforms Ireland Limited€174.0MGDPRIreland DPCIrelandother
On 26 September 2024, the Irish Data Protection Commission (DPC) adopted a final...

On 26 September 2024, the Irish Data Protection Commission (DPC) adopted a final decision in an own-volition statutory inquiry, concerning the processing of user passwords on the Facebook…

Articles: Art. 4, Art. 5, Art. 32, Art. 33

2025-09-01SOCIETE DE VENTE EN LIGNE DE VETEMENTS, CHAUSSURES ET ACCESSOIRES€150.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Information et consentement (cookies)
2021-12-31SERVICES INTERNET (MOTEUR DE RECHERCHE, PLATEFORME DE VIDEOS, ETC.)€150.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Modalités de refus des cookies
2021-12-31RESEAU SOCIAL€60.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Modalités de refus des cookies Information des personnes
2022-12-19SOCIETE DE VENTE DE SYSTEMES D’EXPLOITATION, DE LOGICIELS APPLICATIFS, DE MATERIELS ET DE SERVICES DERIVES€60.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Consentement des personnes (cookies et traceurs)
2019-01-21ÉDITEUR DE SYSTÈME D'EXPLOITATION€50.0MGDPRFrance CNILFranceother
Manque de transparence, information insatisfaisante et absence de consentement v...

Manque de transparence, information insatisfaisante et absence de consentement valable

2024-11-14OPERATEUR DE TELECOMMUNICATIONS€50.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Information des personnes (cookies) Prospection commerciale (article L. 34-5 CPC...

Information des personnes (cookies) Prospection commerciale (article L. 34-5 CPCE)

2025-01-01Vodafone Germany€45.0MGDPRGermany BfDIGermanydata_breach
Vendor security failures, weak data controls
2023-06-15SOCIÉTÉ SPÉCIALISÉE DANS L'AFFICHAGE DE PUBLICITÉS CIBLÉES SUR LE WEB€40.0MGDPRFrance CNILFranceother
Consentement des personnes Information des personnes et transparence Non respect...

Consentement des personnes Information des personnes et transparence Non respect du droit d'accès Retrait du consentement et effacement des données Encadrement des relations entre les responsables conjoints de traitement

2020-12-07SOCIÉTÉ DE COMMERCE EN LIGNE€35.0MFrench ePrivacy rules (cookies)France CNILFranceconsent
Manquement relatif aux cookies ; manquement relatif à l'information des personne...

Manquement relatif aux cookies ; manquement relatif à l'information des personnes

2023-12-27SOCIETE DE SUPPORT LOGISTIQUE€32.0MGDPRFrance CNILFranceother
Défaut de base légale Minimisation des données Information des personnes et tran...

Défaut de base légale Minimisation des données Information des personnes et transparence Défaut de sécurité des données

2026-01-08OPÉRATEUR DE TÉLÉPHONIE MOBILE€27.0MGDPRFrance CNILFranceother
Durée de conservation; Défaut de sécurité des données; Obligation de communiquer...

Durée de conservation; Défaut de sécurité des données; Obligation de communiquer une violation de données aux personnes concernées

Page 1 of 28Next