GDPR Fine

Experian Netherlands Credit Rating Agency Gets €2.7 Million GDPR Fine for Personal Data Collection

October 27, 2025

Credit rating agency Experian's Netherlands branch has been assessed a €2.7 million (about $3.2 million) GDPR fine for improper collection of personal data, which was drawn from multiple public and private sources that data subjects were not necessarily aware of.

Judge hammer on Euro notes showing GDPR fine for cookie consent

Data Protection News

Shein Hit With €150 Million GDPR Fine Over Cookie Consent Violations

September 9, 2025

Popular "fast fashion" app Shein has landed in some regulatory trouble in the EU, as France's data regulator CNIL has issued a €150 million GDPR fine due to failure to obtain cookie consent.

Finger on Gmail app showing GDPR fine over cookie consent

Data Protection News

France Issues €325 Million GDPR Fine to Google for Sneaky Cookies

September 9, 2025

Google is facing a €325 million fine from French data regulator CNIL for its placement of cookies that may not have been noticed by those signing up for new accounts and its use of ads in Gmail.

Data Protection News

OpenAI Hit With €15 Million GDPR Fine in Italy Over Data Privacy Violations

December 31, 2024

Italy was one of the first EU nations to take OpenAI and ChatGPT to task over data privacy violations, even banning the app from the country briefly, and it has now issued the bloc's first GDPR fine of this nature to the company.

Data Protection News

Penalty Finally Issued in 2018 Privacy Breach Case as Meta Gets €251 Million GDPR Fine

December 30, 2024

A 2018 Facebook privacy breach incident that first drew complaints just after the GDPR went into force has finally resulted in the issuance of a penalty. The €251 million GDPR fine stems from a flaw in the platform's "View All" feature.

Hammer and Euro notes showing GDPR fine for ad tracking

Data Protection News

LinkedIn Gets €310 Million GDPR Fine for Ad Tracking

October 28, 2024

Business and employment networking giant LinkedIn is being hit with a big GDPR fine for failure to obtain sufficiently informed consent for ad tracking, and for not having a valid basis for its processing of first party personal data for this purpose.

Irish Meta office showing GDPR fine over password storage

Data Protection News

Meta Receives €91 Million GDPR Fine Over Plaintext Password Storage

October 4, 2024

A 2019 incident in which user passwords were inadvertently stored in plaintext has netted a €91 million GDPR fine for Meta from Ireland's DPC, though access to the password storage was limited to Meta workers on an internal company network.

Judge's hammer gavel showing GDPR fine for facial recognition database

Data Protection News

Dutch Regulator Hits Clearview AI With Large GDPR Fine for Illegal Facial Recognition Database

September 10, 2024

Despite formally pulling out of the EU market, Clearview AI continues to face legal difficulties as its facial recognition database has drawn a €30.5 million ($33.7 million) GDPR fine from the Dutch data protection agency.

Amazon shipping box showing GDPR fine for employee monitoring

Data Protection News

€32 Million GDPR Fine to Amazon for Excessive Employee Monitoring

February 8, 2024

Amazon was penalized for excessive employee monitoring, insufficient data minimization, and failing to meet transparency and security requirements. Much of the GDPR fine centers on the hand scanners that are issued to warehouse employees.

Close up of face with facial recognition technology showing UK GDPR fine

Data Protection News

Clearview AI Beats UK GDPR Fine Over Facial Recognition, ICO Deemed Out of Its Jurisdiction

October 23, 2023

A UK GDPR fine that would have cost Clearview AI £7.5 million fine has been overturned, as an appeals court found that lead regulator ICO was outside of its jurisdiction in penalizing the foreign facial recognition firm.