Data protection authorities imposed over €1 billion in fines in 2024, but activists complain that violations of the law far too rarely result in penalties. Data protection authorities in Europe ...

The French data protection regulator, CNIL, today issued a collective €42 million ($48.9 million) fine to two French telecom ...

The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity. The penalties ...

Companies in the technology sector, as well as political and commercial organizations, have to pay over €4 billion in fines ...

GDPR is a sweeping data privacy law that impacts any business collecting data on EU citizens. Make sure your business is ...

On 27 March 2025, the UK Information Commissioner’s Office (ICO) issued a £3.07 million fine to an IT services provider following a ransomware attack in 2022 that affected the company’s health care ...

Data protection regulators, particularly in Europe, appear to be taking a tough line with large tech firms over data privacy violations. Law firm DLA Piper recorded a total of €1.2bn ($1.26bn) of ...

Ireland’s Data Protection Commission was responsible for more than half of the €1.2bn levied by European states for data protection breaches in 2024. The Irish regulator, which until recently was ...