Its been over two years since the General Data Protection Regulation (GDPR) was implemented in the EU and EEA. We have studied fines and penalties that data protection authorities have imposed in the EU under the GDPR to determine which countries violate GDPR the most and the total combined fine of the EU countries in 2020.

Key findings

...

Total GDPR fine of
EU countries in 2020

Insufficient legal basis for data processing

The most common GDPR violation

Spain - 76

Country with the most
GDPR violations

France - €138.3m

Country with the biggest
GDPR fine total

EU countries ranked by
total GDPR fine amount in 2020

(Last updated on January 7th, for the period of January 1st, 2020 - January 1st, 2021)

Rank

Country

Total fine amount per country

Number of fines
VIEW ALL GDPR fines by amount
Back To Top

GDPR fines ranked by fine amount

Fine Types

Insufficient legal basis for data processing Insufficient fulfilment of data subjects rights Insufficient technical and organisational measures to ensure information security Non-compliance with general data processing principles Insufficient fulfilment of information obligations Insufficient cooperation with supervisory authority Lack of appointment of data protection officer Insufficient fulfilment of data breach notification obligations

Rank

Country

Type

Offender

Fine

Source
VIEW ALL GDPR fines by country
Back To Top

Methodology

All data sourced from the GDPR Enforcement Tracker fines database, specifically fines and penalty records dating 2020. Please note that not all fines are made public, therefore ranking is limited to publicly available GDPR fines.

The 2020 figures may change if additional violations are found or reported by the regulators in 2021 for the previous period.

Brought to you by

Learn more about autopilot investing by reading Wealthsimple review