Home Blog Biggest GDPR Fines

Jump to Section

Quick Facts — GDPR Compliance Lawyers

GDPR fines have been a hot topic since the law’s European inception. To avoid incurring penalties, data controllers and processors should have the proper protocols and contracts in place, including data transfer agreements , data processing agreements , and data protection agreements .

In this article, we help you understand penalties surrounding GDPR violations, offer real-world examples, and show you how to calculate GDPR fines.

What is the Penalty for a GDPR Violation?

The penalties for a General Data Protection Regulation (GDPR) violation can result in up to twenty million euros or four percent of the company’s global annual revenue from the previous year, whichever number is higher. EU legislators impose fines for penalties to enforce data protection compliance.

You can learn more about the GDPR through this web page .

GDPR Fine Examples

It is hard to imagine the magnitude of how massive GDPR fines can grow. Since penalties are variable according to the number of records exposed and the severity of the breach, they can easily reach the multi-million dollar range. In the last few years, there have been several high-profile GDPR breach cases with alarmingly high fines.

Here is an explanation of nine GDPR fine examples below:

Example 1. Amazon: $877 Million

Amazon received a massive GDPR fine. The violation relates to the companies cookie policy and consent procedures. This GDPR fine is not the first received by Amazon as they faced a $40,000 fine at the tail-end of 2020.

Example 2. Google: $56.6 Million

In 2019, Google received its fine in March 2020 and was the largest on record until the Amazon violation. They were fined for how Google communicated privacy policies to users. In this case, Google should have offered end-users more information in their privacy policy and user agreement .

Example 3. H & M: $41 million

German authorities fined H & M around $41 million for employee data violations. H & M did not take proper precautions to protect employee days off and unnecessarily shared videos of meetings with 50 other H & M managers. These meetings were used to make decisions about the employee’s performance without their knowledge or consent.

Example 4. British Airways: $26 million

British Airways received a GDPR fine related to a 2018 incident. Their fine was the result of a breached computer system that affected over 400,000 customers. Customer information, payment details, and log-in information were exposed at the time of the breach.

Example 5. Marriott: $23.8 million

After a database breach, Marriott hotels exposed 383 million guest records, and hackers obtained all collected customer information. The company could have avoided the fine if they had paid due diligence after acquiring Starwood Hotels.

Example 6. Google: $8.3 million

Google received another fine in 2020 for a GDPR violation. Sweden fined Google for failing to remove search result listings under the right to be forgotten principle. The search provider should have honored this right by ensuring that a process was available to respond to erasure requests without unnecessary delay.

Example 7. Fastweb: $5.5 million

This Italian telecommunications company received a massive fine in 2021 after engaging in telemarketing without obtaining consumer consent. The company was using fake or false telephone numbers that were not registered with communication operators, and Fastweb should have obtained consumer consent beforehand since this standard is very high.

Example 8. Bulgaria’s National Revenue Agency: $3 million

Bulgaria’s National Revenue Agency received a fine after a data breach affected five million people. The information leaked included names, contact details, and tax information. The agency failed to take proactive and effective technological measures to protect the data in its control.

All GDPR penalties are paid to the Information Commissioner’s Office (ICO) and into a government fund owned by the treasury. GDPR fines are utilized to fund public resources and services, and most European nations use the structure.

This article also contains examples of GDPR fines.

Meet some lawyers on our platform

Heather B.

190 projects on CC
CC verified
View Profile

Darren W.

1 project on CC
CC verified
View Profile

Ted A.

50 projects on CC
CC verified
View Profile

Ryenne S.

987 projects on CC
CC verified
View Profile

How are GDPR Fines Calculated?

GDPR fines are calculated in generally the same manner as described in this article. However, several factors influence the total fine amount, including company size, size class, subcategory, average annual turnover, and the facts and circumstances of the violation. You should always work with a legal professional to help you determine if the GDPR fine you are receiving is fair and how to protect unfair or incorrect amounts.

Here are five steps for calculating GDPR fines:

Step 1. Categorize Your Company’s Size

Start by categorizing your company’s size. You can find your GDPR size class and subcategories through the GDPR website for more information.

Step 2. Account for Your Average Annual Turnover

After locating your company’s subgroup, determine the average annual turnover to which your company belongs. If your annual turnover exceeds 500 million euros, the maximum fine of two or four percent should be applied to your situation.

Step 3. Divide Your Average Annual Turnover by 360

In this next step, you will divide your average annual turnover by 360. This calculation determines the fine’s basic economic value.

Step 4. Classify the Basic Value Factor

Take the number from step three and classify the basic value factor. This number is defined as the severity of your offense. Determination of your basic value factor is based on concrete facts and circumstances and listed as light, medium, severe, or very severe.

Step 5. Adjust the Calculation

Finally, you will want to take your calculated amount and adjust it for the circumstances both in favor of and against the tortfeasor. Typically, these circumstances surround offense-related details, such as proceeding length and company insolvency. Depending upon the facts and circumstances, there could be reductions or increases that apply to your final number.

For greater clarity on calculating a GDPR fine, you can use the following formula to help:

Average annual turnover x Basic value factor = Amount of fine

It is not always easy to calculate a GDPR violation without professional help. Here is a web page that discusses penalties for GDPR violations.

Maximum Fine for Breach of GDPR

The maximum fine for a breach of the GDPR is 20 million euros or four percent of the preceding year’s revenues. A company will receive a penalty that is the greater of the two numbers. However, not every violation results in a data protection fine.

There is a wide range of other actions that they can take against offending companies, including:

  • Issuing reprimands and warnings
  • Temporarily or permanently banning data processing rights
  • Ordering the restriction or erasure of personally identifiable information (PII)
  • Rescinding data transfer rights to other countries

There are a host of penalties that the GDPR can impose. Check out this article for examples of GDPR breach costs.

Can an Individual be Fined for GDPR Breach?

Yes, an individual can be fined for a GDPR breach if they engage in a legitimate business. Otherwise, the violation falls under criminal activity and subsequent legal charges. If you have questions about whether you could be fined for a GDPR breach, speak with GDPR compliance lawyers to apply the law to your situation.

GDPR compliance is essential when soliciting Europeans and collecting their information. Otherwise, severe fines and penalties are on the line, not to mention the damage to your brand and intellectual property. Privacy lawyers in your state will help you understand the rules provided in the GDPR and how to structure your agreements so that they meet the requirements.


ContractsCounsel is not a law firm, and this post should not be considered and does not contain legal advice. To ensure the information and advice in this post are correct, sufficient, and appropriate for your situation, please consult a licensed attorney. Also, using or accessing ContractsCounsel's site does not create an attorney-client relationship between you and ContractsCounsel.


Need help with a GDPR Compliance?

Create a free project posting
Clients Rate Lawyers 4.9 Stars
based on 22,737 reviews

Meet some of our Lawyers

Tim E. on ContractsCounsel
View Tim
4.8 (65)
Member Since:
August 12, 2020

Tim E.

Founding Member/Attorney
Free Consultation
Cleveland, OH
12 Yrs Experience
Licensed in OH
Cleveland State University College of Law

I am a business attorney focused on providing practical, targeted legal services for small businesses, startups, contractors, consultants, and service providers. I help clients efficiently review, draft, and improve everyday business contracts, including service agreements, NDAs, independent contractor agreements, vendor contracts, commercial leases, and purchase documents. My approach is straightforward: identify the terms that matter, explain risks in plain English, and deliver clear, usable edits or drafts without unnecessary complexity. I regularly handle fixed-fee, quick-turnaround projects such as contract reviews, agreement drafting, and demand or termination letters. While I offer streamlined, project-based services for routine matters, I can also assist with broader business legal needs as they arise.

Recent  ContractsCounsel Client  Review:
5.0

"Excellent experience with Tim on my relatively complex EULA for a suite of network appliance products. Tim was very fair with pricing, responsive, diligent, thorough, technically knowledgeable, took the time to address all my questions and concerns, and finished (with revision) on schedule and budget. Great experience overall and I'll definitely be using Tim for more work in the future with my business. I'll also be using Contract Counsel and recommending it to everyone I know as well! THANK YOU! -Devin"

Faryal A. on ContractsCounsel
View Faryal
4.9 (267)
Member Since:
February 23, 2023

Faryal A.

Attorney/Counsel
Free Consultation
Houston, Texas
4 Yrs Experience
Licensed in TX
University of Houston

Ms. Ayub is an attorney licensed to practice in Texas. Before moving to the US, she has a number of years of experience in contract review, analysis and drafting. Ms. Ayub is available to help you with your legal problems, as well as filling LLC and other business entity formation documents. To know more about her practice, please visit https://ayublawfirmpllc.com/.

Recent  ContractsCounsel Client  Review:
5.0

"Everything was clearly explained and I feel much more confident about the documents now."

Drew B. on ContractsCounsel
View Drew
4.6 (10)
Member Since:
July 1, 2021

Drew B.

Managing Member
Cleveland, Ohio
28 Yrs Experience
Licensed in MO, OH
Saint Louis University

Drew is an entrepreneurial business attorney with over twenty years of corporate, compliance and litigation experience. Drew currently has his own firm where he focuses on providing outsourced general counsel and compliance services (including mergers & acquisitions, collections, capital raising, real estate, business litigation, commercial contracts and employment matters). Drew has deep experience counseling clients in healthcare, medical device, pharmaceuticals, information technology, manufacturing, and services.

Recent  ContractsCounsel Client  Review:
4.7

"Hired for a settlement contract to be written out in legal manner. Ammended contract as well to add clauses that we had not written.Efficient, professional. Said the time-frame would be about 4 business days and he did deliver on that in fact worked through the weekend and mlk day. Offered one final revision as well as a call to finalize language of contract. The final document delivery was more than we expand also he went above and beyond to deliver extra documents we may need. Would highly recommend."

Sara S. on ContractsCounsel
View Sara
4.9 (157)
Member Since:
July 14, 2023

Sara S.

Attorney
Free Consultation
Washington, District of Columbia
6 Yrs Experience
Licensed in DC, MD, PA
American University Washington College of Law

With over eleven years of intellectual property experience, I’m happy to work on your contract problem. I am very diligent and enjoy meeting tight deadlines. Drafting memoranda, business transactional documents, termination notices, demand letters, licenses and letter agreements are all in my wheelhouse! Working in a variety of fields, from construction to pharmaceutical, I enjoy resolving any disputes that come across my desk. I will prioritize your project, big or small. Please be ready and prepared with all relevant documentation so we can get started as soon as you click HIRE! Hourly rate projects will be billed hourly in accordance with the timesheet. Flat rate projects will be billed in segments. Choosing an hourly or flat rate is up to you. Absolutely no refunds.

Recent  ContractsCounsel Client  Review:
5.0

"Sara was responsive and knowledgeable about prenup specifics. Thank you so much!"

Ryenne S. on ContractsCounsel
View Ryenne
4.9 (610)
Member Since:
October 11, 2022

Ryenne S.

Principal Attorney
Free Consultation
Chicago, Illinois
16 Yrs Experience
Licensed in IL
DePaul University College of Law

My name is Ryenne Shaw and I help business owners build businesses that operate as assets instead of liabilities, increase in value over time and build wealth. My areas of expertise include corporate formation and business structure, contract law, employment/labor law, business risk and compliance and intellectual property. I also serve as outside general counsel to several businesses across various industries nationally. I spent most of my early legal career assisting C.E.O.s, General Counsel, and in-house legal counsel of both large and smaller corporations in minimizing liability, protecting business assets and maximizing profits. While working with many of these entities, I realized that smaller entities are often underserved. I saw that smaller business owners weren’t receiving the same level of legal support larger corporations relied upon to grow and sustain. I knew this was a major contributor to the ceiling that most small businesses hit before they’ve even scratched the surface of their potential. And I knew at that moment that all of this lack of knowledge and support was creating a huge wealth gap. After over ten years of legal experience, I started my law firm to provide the legal support small to mid-sized business owners and entrepreneurs need to grow and protect their brands, businesses, and assets. I have a passion for helping small to mid-sized businesses and startups grow into wealth-building assets by leveraging the same legal strategies large corporations have used for years to create real wealth. I enjoy connecting with my clients, learning about their visions and identifying ways to protect and maximize the reach, value and impact of their businesses. I am a strong legal writer with extensive litigation experience, including both federal and state (and administratively), which brings another element to every contract I prepare and the overall counsel and value I provide. Some of my recent projects include: - Negotiating & Drafting Commercial Lease Agreements - Drafting Trademark Licensing Agreements - Drafting Ambassador and Influencer Agreements - Drafting Collaboration Agreements - Drafting Service Agreements for service-providers, coaches and consultants - Drafting Master Service Agreements and SOWs - Drafting Terms of Service and Privacy Policies - Preparing policies and procedures for businesses in highly regulated industries - Drafting Employee Handbooks, Standard Operations and Procedures (SOPs) manuals, employment agreements - Creating Employer-employee infrastructure to ensure business compliance with employment and labor laws - Drafting Independent Contractor Agreements and Non-Disclosure/Non-Competition/Non-Solicitation Agreements - Conducting Federal Trademark Searches and filing trademark applications - Preparing Trademark Opinion Letters after conducting appropriate legal research - Drafting Letters of Opinion for Small Business Loans - Drafting and Responding to Cease and Desist Letters I service clients throughout the United States across a broad range of industries.

Recent  ContractsCounsel Client  Review:
5.0

"Ryenne was wonderful to work with! She went through each section of my contract line by line with me and made sure I understood every aspect."

Cecilia O. on ContractsCounsel
View Cecilia
5.0 (1)
Member Since:
January 31, 2022

Cecilia O.

Contracts Attorney
Free Consultation
San Antonio
19 Yrs Experience
Licensed in CT, MD
Ghana School of Law

With 15 years of extensive transactional/contracts experience reviewing and negotiating commercial contracts including a wide variety of purchase orders and contracts and non-disclosure agreements (NDA), I believe I can immediately contribute to the continued success of your team. I have been commended for a range of valuable skills—excellent contract management and contract administration, legal research, risk analysis, drafting and negotiations, and strategic thinking. I have worked as a legal consultant for 10+ years and I have reviewed over 7,500 contracts through this position. Contracts I have reviewed include but not limited to purchase orders, commercial and construction contracts, equipment rental agreements, non-disclosure, confidentiality, vendor agreements, service agreements, site access agreements, international agreements, request for proposals (RFP), bids and government contracts. These experiences have enabled me to master the ability to work independently and expeditiously to identify and assess issues and provide legally sound recommendations, consistent with good business practices. I have led teams (sales, insurance and management) to successfully negotiate contract terms with customers. Effective Communicator and Negotiator. I am a people person, and for the past 13 years, I have acquired excellent oral and written communication skills that enable me to interact and negotiate effectively with stakeholders at all levels. I am a self-starter with a strong work ethic. I have a high degree of resourcefulness, diligence, and dependability. Most important, I adapt to changing priorities quickly, thriving in an environment with high volume and short turnaround deadlines. My experience over the years allows me to transfer my skills to all types of contracts to meet the client’s needs. I am hopeful to provide similar legal expertise, effective contract administration and leadership to your organization. It would be a pleasure to meet within the next few weeks and discuss how my qualifications, experience, and capabilities will best fit the needs of your outfit.

Recent  ContractsCounsel Client  Review:
5.0

"Cecilia was great to work with. She had knowledge on our project and I would not hesitate to work with her again."

Mathew K. on ContractsCounsel
View Mathew
5.0 (3)
Member Since:
February 1, 2022

Mathew K.

Founding Attorney
Free Consultation
Illinois
11 Yrs Experience
Licensed in IL
DePaul University College of Law

Mathew Kerbis is The Subscription Attorney. He’s on a mission to affordably serve clients at scale via the subscription model and inspire attorneys to abandon the billable hour. He founded the law firm Subscription Attorney LLC after working for private practice law firms for nine years. His firm leverages automations and artificial intelligence to offer more accessible and reasonable prices like legal advice starting at $19.99/month and $49.99/page.

Recent  ContractsCounsel Client  Review:
5.0

"Mathew was pleasant and professional. He passed along great legal knowledge and provided an excellent service at a reasonable rate. I would definitely use his services again."

Find the best lawyer for your project

Browse Lawyers Now

See Real GDPR Compliance Projects

New York GDPR Website Privacy and Contractual Clause Drafting
  • New York
  • 5 lawyer bids
  • $850 - $1,750
View Details
Maryland GDPR Complaint Response Drafting
  • Maryland
  • 2 lawyer bids
  • $1,200 - $1,350
View Details
Virginia Attorney Needed to Review Privacy and Cookie Policies for Car Aggregator Platfor Review
  • Virginia
  • 5 lawyer bids
  • $249 - $1,400
View Details

Quick, user friendly and one of the better ways I've come across to get ahold of lawyers willing to take new clients.

View Trustpilot Review

Need help with a GDPR Compliance?

Create a free project posting
Clients Rate Lawyers 4.9 Stars
based on 22,737 reviews
CONTRACT LAWYERS BY TOP CITIES
See All Privacy Lawyers
GDPR FINES LAWYERS BY CITY
See All GDPR Fines Lawyers

Contracts Counsel was incredibly helpful and easy to use. I submitted a project for a lawyer's help within a day I had received over 6 proposals from qualified lawyers. I submitted a bid that works best for my business and we went forward with the project.

View Trustpilot Review

I never knew how difficult it was to obtain representation or a lawyer, and ContractsCounsel was EXACTLY the type of service I was hoping for when I was in a pinch. Working with their service was efficient, effective and made me feel in control. Thank you so much and should I ever need attorney services down the road, I'll certainly be a repeat customer.

View Trustpilot Review

I got 5 bids within 24h of posting my project. I choose the person who provided the most detailed and relevant intro letter, highlighting their experience relevant to my project. I am very satisfied with the outcome and quality of the two agreements that were produced, they actually far exceed my expectations.

View Trustpilot Review

Need help with a GDPR Compliance?

Create a free project posting
Clients Rate Lawyers 4.9 Stars
based on 22,737 reviews

Want to speak to someone?

Get in touch below and we will schedule a time to connect!

Request a call

Find lawyers and attorneys by city