GDPR fines analysed and explained
Our data protection experts regularly analyse fines and other sanctions imposed by European data protection authorities for violations of the European General Data Protection Regulation (GDPR). The aim of our analysis is to equip you with the knowledge to avoid GDPR fines, having learned from the mistakes of other companies.
Multiple data protection violations lead to 600,000 Euro fine
Data subject complaints lead to supervisory authority inspection at Groupe Canal+, which in turn uncovers more GDPR violations resulting in 600,000 Euro fine.
EDPB Guidelines on the calculation of GDPR fines
GDPR fines are to be imposed in a standardised manner across Europe according to the European Data Protection Board. The new requirements could be quite expensive for some companies.
EUR 5 million fine for intransparent data processing and inadequate disclosure
The music streaming service Spotify did not sufficiently inform its users about the processing of their data. The Swedish supervisory authority has now imposed a GDPR fine.
Record fine imposed on Meta for data transfers to the U.S.
The Irish supervisory authority imposed the highest GDPR fine to date on the Facebook group, and banned further data transfers to the United States. We explain why the decision is important for all U.S. electronic communications service providers and their European customers.
GDPR fine for NGO using tweets for a study
The Belgian DPA issued a fine against an NGO for failing to comply with data protection law when processing publicly available personal data.
CNIL fines Google and Facebook over cookie consent
CNIL issued a combined fine of EUR 150 million against two Google subsidiaries and a EUR 60 million fine against Facebook.
EUR 746 million record GDPR fine issued for insufficient consent
Amazon has been hit by the highest fine ever imposed under the GDPR. If the company does not change its policies to comply with data protection laws, it could soon have to pay even more.
EUR 225 million fine for violating GDPR transparency obligations
The DPC issued a fine of EUR 225 million against WhatsApp for violating its transparency obligations under the GDPR. The decision highlights the importance of ensuring GDPR compliance and provides further important advice for companies.
