Regulatory Watch  /  European Union  /  Enforcement
Low impactEnforcementPublished

Only 1.3% of GDPR cases before EU DPAs result in a fine, analysis shows

A noyb analysis of EDPB statistics finds that, on average, just 1.3% of cases before national data protection authorities end in a fine. Between 2018 and 2023 EU DPAs imposed €4.29 billion in fines, with almost 40% stemming from noyb litigation. The low fine rate is seen as a barrier to effective GDPR compliance.

Why it matters: The report highlights that the scarcity of fines undermines the GDPR’s deterrent effect across the EU.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Data Protection Day: Only 1.3% of cases before EU DPAs result in a fine
noyb · primary source · Jan 28, 2025
Data Protection Day: Only 1.3% of cases before EU DPAs result in a fine
noyb · Jan 28, 2025
Details
JurisdictionEuropean Union
RegulatorEuropean Data Protection Board (EDPB)
LawGeneral Data Protection Regulation
StatusPublished
PublishedJanuary 28, 2025
Effectivenot stated
OrganisationsMeta, Apple, Google, Microsoft, Amazon, noyb
Topicsprivacy
Datapersonal