London Daily

Focus on the big picture.
Saturday, Aug 30, 2025

Europe's privacy overhaul has led to $126 million in fines - but regulators are just getting started

Europe's privacy overhaul has led to $126 million in fines - but regulators are just getting started

The EU’s GDPR privacy law led to over 160,000 data breach notifications, according to law firm DLA Piper. The biggest penalty under GDPR to date was a fine of 50 million euros imposed on Google, DLA Piper says. DLA Piper Partner Ross McKean says there will be “slow progress” before much bigger fines are imposed.
The European Union’s overhaul of data privacy regulation is estimated to have generated 114 million euros ($126 million) in fines since it was introduced almost two years ago.

Since its implementation in May 2018, the General Data Protection Regulation (GDPR) led to over 160,000 data breach notifications across Europe, according to research from multinational law firm DLA Piper.

Ross McKean, a partner at DLA Piper specializing in cyber and data protection, said his firm’s findings showed “we’re still in the very early days” of enforcement. It’s been roughly 20 months since the EU’s new rules were introduced.

“It’s not a huge surprise that we’re seeing a slow start to fines, but there’s more to come,” McKean told CNBC in an interview.

The biggest fine under GDPR to date was a penalty dished out by the French data protection regulator. The CNIL fined Google 50 million euros last year for alleged infringements of GDPR. Those infringements were related to transparency and a lack of valid consent, rather than a data breach.

Under GDPR, a company can be fined either 20 million euros or up to 4% of their annual revenues, whichever is the greater amount. The stakes are considerably high for companies like Google and Facebook, which handle a huge amount of data and make billions of dollars every year.

Authorities have been looking into potential violations of the landmark EU law across the continent. Ireland’s Data Protection Commission has multiple ongoing investigations into GDPR violations, probing a range of big tech companies from Facebook to Apple.

Britain’s Information Commissioner’s Office last year announced notices of intent to impose fines on British Airways and Marriott International, collectively amounting to about £282 million, but DLA Piper points out that both penalties are yet to be finalized.

The regulator also fined Facebook £500,000 ($651,000) over the Cambridge Analytica scandal, but that pertained to privacy violations that took place before GDPR was introduced.

Cambridge Analytica, which once claimed to have run all the digital operations for President Donald Trump’s 2016 presidential campaign, found itself at the heart of a massive privacy headache for Facebook in 2018. The social network improperly shared the data of 87 million users with the now-infamous — and defunct — U.K. political consultancy.


‘Slow progress’

DLA Piper said that the rate of data breach notifications increased almost 13% from the first eight months of GDPR to the current year.

The firm notes that not all member states of the EU make their breach notification statistics publicly available and that many only provided figures for part of the period covered by the report. It therefore rounded up the numbers and, in some cases, had to extrapolate to provide accurate approximations.

GDPR has been a point of notable frustration for Europe’s data protection authorities, as well as businesses. While the regulators have the power to levy sizable fines, DLA Piper’s McKean said that some may be put off doing so as they’re often under-resourced and wary of being faced with appeals.

Labelling GDPR a “vague law,” McKean said: “It is going to be a slow progress to get the legal certainty regulators need to start whacking companies with higher fines.”
Newsletter

Related Articles

0:00
0:00
Close
Corporate America Cuts Middle Management as Bosses Take On Triple the Workload
Parents Sue OpenAI After Teen’s Death, Alleging ChatGPT Encouraged Suicide
Amazon Faces Lawsuit Over 'Buy' Label on Digital Streaming Content
Federal Reserve Independence Questioned Amid Trump’s Push to Reshape Central Bank
British Politics Faces Tumultuous Autumn After Summer of Rebellions and Rising Farage Momentum
US Appeals Court Rules Against Most Trump-Era Tariffs
UK Sought Broad Access to Apple Users’ Data, Court Filing Reveals
UK Bank Shares Dive Over Potential Tax on Sector
Germany’s Auto Industry Sheds 51,500 Jobs in First Half of 2025 Amid Deepening Crisis
Bruce Willis Relocated Due to Advanced Dementia
French and Korean Nuclear Majors Clash As EU Launches Foreign Subsidy Probe
EU Stands Firm on Digital Rules as Trump Warns of Retaliation
Getting Ready for the 3rd Time in Its History, Germany Approves Voluntary Military Service for Teenagers
Argentine President Javier Milei Evacuated After Stones Thrown During Campaign Event
Denmark Confronts U.S. Diplomat Over Covert Trump-Linked Influence in Greenland
Starmer Should Back Away from ECHR, Says Jack Straw
Trump Demands RICO Charges Against George Soros and Son for Funding Violent Protests
Taylor Swift Announces Engagement to NFL Star Travis Kelce
France May Need IMF Bailout, Warns Finance Minister
Chinese AI Chipmaker Cambricon Posts Record Profit as Beijing Pushes Pivot from Nvidia
After the Shock of Defeat, Iranians Yearn for Change
Ukraine Finally Allows Young Men Aged Eighteen to Twenty-Two to Leave the Country
The Porn Remains, Privacy Disappears: How Britain Broke the Internet in Ten Days
YouTube Altered Content by Artificial Intelligence – Without Permission
Welcome to The Definition of Insanity: Germany Edition
Just a reminder, this is Michael Jackson's daughter, Paris.
Spotify’s Strange Move: The Feature Nobody Asked For – Returns
Manhunt in Australia: Armed Anti-Government Suspect Kills Police Officers Sent to Arrest Him
China Launches World’s Most Powerful Neutrino Detector
How Beijing-Linked Networks Shape Elections in New York City
Ukrainian Refugee Iryna Zarutska Fled War To US, Stabbed To Death
Elon Musk Sues Apple and OpenAI Over Alleged App Store Monopoly
2 Australian Police Shot Dead In Encounter In Rural Victoria State
Vietnam Evacuates Hundreds of Thousands as Typhoon Kajiki Strikes; China’s Sanya Shuts Down
UK Government Delays Decision on China’s Proposed London Embassy Amid Concerns Over Redacted Plans
A 150-Year Tradition to Be Abolished? Uproar Over the Popular Central Park Attraction
A new faith called Robotheism claims artificial intelligence isn’t just smart but actually God itself
Deputy Prime Minister Angela Rayner Purchases Third Property Amid Housing Tax Reforms Debate
HSBC Switzerland Ends Relationships with Over 1,000 Clients from Saudi Arabia, Lebanon, Qatar, and Egypt
Sharia Law Made Legally Binding in Austria Despite Warnings Over 'Incompatible' Values
Italian Facebook Group Sharing Intimate Images Without Consent Shut Down Amid Police Investigation
Dutch Foreign Minister Resigns Amid Deadlock Over Israel Sanctions
Trump and Allies Send Messages of Support to Ukraine on Independence Day Amid Ongoing Conflict
China Reels as Telegram Chat Group Shares Hidden-Camera Footage of Women and Children
Sam Nicoresti becomes first transgender comedian to win Edinburgh Comedy Award
Builders uncover historic human remains in Lancashire house renovation
Australia Wants to Tax Your Empty Bedrooms
MotoGP Cameraman Narrowly Avoids Pedro Acosta Crash at Hungarian Grand Prix
FBI Investigates John Bolton Over Classified Documents in High-Profile Raids
Report reveals OpenAI pitched national ChatGPT Plus subscription to UK ministers
×