What are the fines for violating GDPR?

The maximum penalty for GDPR violations is 4% of global revenue or €20 million, whichever is higher. Data protection authorities can also issue sanctions, such as bans on data processing or public reprimands.

Past GDPR fines

Some notable examples of GDPR fines so far:

  1. Google LLC fined €50m – Jan 2019 (source)
  2. British Airways fined £183m – July 2019 (source)
  3. Marriott International fined £99m – July 2019 (source)

Fines have been observed in Portugal, Germany, France, Poland, Italy, Norway, Lithuania, Belgium, Spain, Denmark, the UK, Romania, Turkey, Greece, Sweden, Hungary, Austria, and Latvia.

Further reading

Need more help?