-
Share
How Much Has Been Paid Out in GDPR Fines in H1 2023?
Established by the European Union, GDPR is a legal framework designed to regulate the processing and transfer of personal data across member states.
According to data analysed by Atlas VPN, companies had to pay almost £1.3 billion in GDPR fines through the first half of 2023.
On 25 May, GDPR celebrated its 5th anniversary. Throughout this time, businesses received 1,679 fines combining to a sum of over £3.4bn.
January and May were particularly noteworthy, with over £342 million and over £1 billion in fines, respectively. Notably saw fines issued against Meta Platforms which control Facebook, Instagram, WhatsApp, and other apps.
Although March only saw £1.3m in fines, it was the month when businesses received the most penalties for data violations, with a total of 46 penalties issued.
February was the month with the least amount of fines issued in H1 2023, with only 34 fines accounting for £2.2mn in penalties. Overall, businesses received 237 fines throughout the first half of 2023.
Cybersecurity writer at Atlas VPN, Vilius Kardelis, shares his thoughts on GDPR enforcement: “The GDPR fines are significantly impacting how businesses operate and handle data.
“Companies must prioritize data privacy and security to avoid potential fines and reputational damage. As we move forward, companies must continue investing in their data protection strategies and staying informed about any updates or changes to the GDPR.”
Countries with the most GDPR violations
As we delve into the topic of countries with the most GDPR violations, it’s important to note that no country is immune to data privacy issues. However, some countries have had more violations than others.
Recommended
- Scotland’s Synthetic Data Journey
- Hiring Activity Continues to Fall in Scotland Amid Skill Shortages
- OECD: Impact of AI in the Workplace Too Early to Call
Since the start of GDPR, Spain has accumulated 689 fines resulting in over £51.3 million in penalties. While the average of each fine is about £75K, Spanish businesses received more than two times the amount of fines than any other country.
Italy’s data protection authorities have issued 284 fines, totalling £114 million in penalties. The average fine there is about £416K. Germany has received the third-highest number of violations, totalling 160. These fines have resulted in penalties of £47 million.
Romania is the last country whose authorities have issued over 100 fines in the 5 years of GDPR’s existence. In addition, Romania has a very low average penalty of only £4,610. Greece stands out from the rest of the countries with a high average per fine of £449k.
