On 27 March 2025, the UK Information Commissioner’s Office (ICO) issued a £3.07 million fine to an IT services provider following a ransomware attack in 2022 that affected the company’s health care ...

Although the GDPR fine value was slightly higher in 2025, the number of personal data breach reports rose even more.

Europe has levied €1.2 billion in GDPR fines during 2025 as data privacy enforcement remains a key priority for authorities.

Regulators logged over 400 personal data breach notifications a day for first time since law came into force GDPR fines ...

GDPR enforcement across Europe remained consistently high throughout 2025, with regulators issuing fines totalling ...

The Irish Data Protection Commission (DPC) remains Europe's largest data enforcer by a wide margin, having issued €4.04 ...

Three major GDPR violations, including a lack of basic security controls, lead to hefty dent in profits The French data ...

The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity. The penalties ...

Data protection authorities imposed over €1 billion in fines in 2024, but activists complain that violations of the law far too rarely result in penalties. Data protection authorities in Europe ...

Data protection regulators, particularly in Europe, appear to be taking a tough line with large tech firms over data privacy violations. Law firm DLA Piper recorded a total of €1.2bn ($1.26bn) of ...