GDPR enforcement by UK and EEA supervisory authorities—tracker
GDPR enforcement by UK and EEA supervisory authorities—tracker

The following Information Law practice note provides comprehensive and up to date legal information covering:

  • GDPR enforcement by UK and EEA supervisory authorities—tracker
  • New interactive GDPR enforcement tracker (trial)
  • Austria
  • Belgium
  • Bulgaria
  • Croatia
  • Cyprus
  • Denmark
  • Estonia
  • France
  • More...

A key objective of the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) was to achieve a level of consistency in relation to how data protection law is implemented and enforced across the EU and EEA. However, there is no single repository for enforcement actions taken by the over thirty supervisory authorities that exist across Europe. See Practice Note: EU and EEA data protection supervisory authorities for a list of the main supervisory authorities in the EU and EEA.

Due to the lack of a single repository for enforcement actions, this Practice Note is not comprehensive but tracks those EU GDPR enforcement decisions:

  1. published as a ‘national news’ press release by the European Data Protection Board (EDPB)

  2. that the Information Law team otherwise become aware of from various sources where total fines are over €2m

This Practice Note also tracks enforcement actions in the UK by the UK Information Commissioner’s Office (ICO) under:

  1. Regulation (EU) 2016/679, the EU GDPR regime (applicable under UK law until the end of the Brexit implementation period at 11 pm UK time on 31 December 2020), and

  2. the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) regime (applicable under UK law from the end of the Brexit implementation period on 31 December 2020)

References to provisions are to those of the EU GDPR, unless otherwise stated in

Popular documents