Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2023-05-12 | data transfers from the EU/EEA to the US by Meta Platforms Ireland Limited for its Facebook service | €1.2B | GDPR | Ireland DPC | Ireland | other | This inquiry examined the basis upon which Meta Platforms Ireland Limited (“Meta...This inquiry examined the basis upon which Meta Platforms Ireland Limited (“Meta Ireland”) transfers personal data from the EU/EEA to the US in connection with the delivery of its Facebook… Articles: Art. 58 |
| 2021-07-01 | Amazon Europe | €746.0M | GDPR | Luxembourg CNPD | Luxembourg | consent | Targeted advertising without valid consent |
| 2024-10-22 | LinkedIn Ireland Unlimited Company | €620.0M | GDPR | Ireland DPC | Ireland | other | This Decision concerns an Inquiry by the Data Protection Commission (the DPC) in...This Decision concerns an Inquiry by the Data Protection Commission (the DPC) into LinkedIn Ireland Unlimited Company (LinkedIn), a data controller with its main establishment in… Articles: Art. 5, Art. 6, Art. 14, Art. 13 |
| 2025-04-30 | TikTok Technology Limited | €530.0M | GDPR | Ireland DPC | Ireland | other | On 30 April 2025, the Irish Data Protection Commission (the ‘DPC’) adopted a fin...On 30 April 2025, the Irish Data Protection Commission (the ‘DPC’) adopted a final decision in an own-volition statutory inquiry, concerning TikTok Technology Limited’s (‘TikTok’) transfers… Articles: Art. 46, Art. 13 |
| 2024-12-12 | Meta Platforms Ireland Limited | €502.0M | GDPR | Ireland DPC | Ireland | other | On 12 December 2024, the Irish Data Protection Commission (‘DPC’) adopted final ...On 12 December 2024, the Irish Data Protection Commission (‘DPC’) adopted final decisions in two own-volition statutory inquiries reprimanding Meta Platforms Ireland Limited (‘MPIL’) and… Articles: Art. 25, Art. 33 |
| 2022-09-02 | processing of personal data relating to child users of the Instagram social networking service | €405.0M | GDPR | Ireland DPC | Ireland | other | The DPC commenced this own-volition inquiry on 21 September 2020, based both on ...The DPC commenced this own-volition inquiry on 21 September 2020, based both on information provided by a third party, and in connection with processing identified by the DPC itself. The… Articles: Art. 5, Art. 6, Art. 12, Art. 24, Art. 25, Art. 35 |
| 2022-12-31 | Meta Platforms Ireland Limited | €390.0M | GDPR | Ireland DPC | Ireland | other | These two inquiries relate to the data processing operations of Meta Platforms I...These two inquiries relate to the data processing operations of Meta Platforms Ireland Limited (“Meta Ireland”) in connection with the delivery of its Facebook and Instagram services. (Meta… Articles: Art. 5, Art. 6, Art. 12, Art. 13 |
| 2025-09-01 | SOCIETE DEVELOPPANT PLUSIEURS SERVICES EN LIGNE | €325.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Information et consentement (cookies); Consentement des personnes (prospection c...Information et consentement (cookies); Consentement des personnes (prospection commerciale par voie électronique - L. 34-5 CPCE) |
| 2023-09-01 | TikTok Technology Limited | €345.0M | GDPR | Ireland DPC | Ireland | other | The Data Protection Commission (DPC) adopted its final decision regarding its in...The Data Protection Commission (DPC) adopted its final decision regarding its inquiry into TikTok Technology Limited (TTL) on 1 September 2023. This own-volition inquiry sought to examine… Articles: Art. 5, Art. 24, Art. 25 |
| 2024-08-01 | Uber | €290.0M | GDPR | Netherlands AP | Netherlands | transfer | Driver data transferred to US without safeguards |
| 2021-08-20 | WhatsApp Ireland Ltd | €225.0M | GDPR | Ireland DPC | Ireland | other | This inquiry, which was commenced by the Data Protection Commission (DPC) on 10 ...This inquiry, which was commenced by the Data Protection Commission (DPC) on 10 December 2018, examined whether WhatsApp Ireland Ltd had discharged its GDPR transparency obligations with… Articles: Art. 5, Art. 13 |
| 2022-11-25 | Meta Dataset | €265.0M | GDPR | Ireland DPC | Ireland | other | On 25 November 2022, the Data Protection Commission (the DPC) adopted a decision...On 25 November 2022, the Data Protection Commission (the DPC) adopted a decision to impose a fine of €265 million and to exercise other corrective powers on Meta Platforms Ireland Limited … Articles: Art. 25 |
| 2023-01-12 | WhatsApp Ireland Ltd | €230.5M | GDPR | Ireland DPC | Ireland | other | This inquiry relates to the processing carried out by WhatsApp Ireland Limited (...This inquiry relates to the processing carried out by WhatsApp Ireland Limited (“WhatsApp Ireland”) in connection with the delivery of its WhatsApp service, in which the DPC has fined… Articles: Art. 6, Art. 12, Art. 13 |
| 2024-09-26 | Meta Platforms Ireland Limited | €174.0M | GDPR | Ireland DPC | Ireland | other | On 26 September 2024, the Irish Data Protection Commission (DPC) adopted a final...On 26 September 2024, the Irish Data Protection Commission (DPC) adopted a final decision in an own-volition statutory inquiry, concerning the processing of user passwords on the Facebook… Articles: Art. 4, Art. 5, Art. 32, Art. 33 |
| 2025-09-01 | SOCIETE DE VENTE EN LIGNE DE VETEMENTS, CHAUSSURES ET ACCESSOIRES | €150.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Information et consentement (cookies) |
| 2021-12-31 | SERVICES INTERNET (MOTEUR DE RECHERCHE, PLATEFORME DE VIDEOS, ETC.) | €150.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Modalités de refus des cookies |
| 2021-12-31 | RESEAU SOCIAL | €60.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Modalités de refus des cookies Information des personnes |
| 2022-12-19 | SOCIETE DE VENTE DE SYSTEMES D’EXPLOITATION, DE LOGICIELS APPLICATIFS, DE MATERIELS ET DE SERVICES DERIVES | €60.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Consentement des personnes (cookies et traceurs) |
| 2019-01-21 | ÉDITEUR DE SYSTÈME D'EXPLOITATION | €50.0M | GDPR | France CNIL | France | other | Manque de transparence, information insatisfaisante et absence de consentement v...Manque de transparence, information insatisfaisante et absence de consentement valable |
| 2024-11-14 | OPERATEUR DE TELECOMMUNICATIONS | €50.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Information des personnes (cookies) Prospection commerciale (article L. 34-5 CPC...Information des personnes (cookies) Prospection commerciale (article L. 34-5 CPCE) |
| 2025-01-01 | Vodafone Germany | €45.0M | GDPR | Germany BfDI | Germany | data_breach | Vendor security failures, weak data controls |
| 2023-06-15 | SOCIÉTÉ SPÉCIALISÉE DANS L'AFFICHAGE DE PUBLICITÉS CIBLÉES SUR LE WEB | €40.0M | GDPR | France CNIL | France | other | Consentement des personnes Information des personnes et transparence Non respect...Consentement des personnes Information des personnes et transparence Non respect du droit d'accès Retrait du consentement et effacement des données Encadrement des relations entre les responsables conjoints de traitement |
| 2020-12-07 | SOCIÉTÉ DE COMMERCE EN LIGNE | €35.0M | French ePrivacy rules (cookies) | France CNIL | France | consent | Manquement relatif aux cookies ; manquement relatif à l'information des personne...Manquement relatif aux cookies ; manquement relatif à l'information des personnes |
| 2023-12-27 | SOCIETE DE SUPPORT LOGISTIQUE | €32.0M | GDPR | France CNIL | France | other | Défaut de base légale Minimisation des données Information des personnes et tran...Défaut de base légale Minimisation des données Information des personnes et transparence Défaut de sécurité des données |
| 2026-01-08 | OPÉRATEUR DE TÉLÉPHONIE MOBILE | €27.0M | GDPR | France CNIL | France | other | Durée de conservation; Défaut de sécurité des données; Obligation de communiquer...Durée de conservation; Défaut de sécurité des données; Obligation de communiquer une violation de données aux personnes concernées |