EuroComply
Sign up
Live enforcement tracker

EU Enforcement Intelligence

Real-time tracking of enforcement decisions from CNIL, Garante, ICO, AEPD, EDPB, and all major EU supervisory authorities. Updated continuously from official authority publications.

220

Total actions tracked

12

Authorities monitored

8

Regulations covered

27

EU member states

By authority — last 90 days

EUR-Lex43
EDPB40
Court of Justice (EU)40
European Parliament17
ESMA10
CNIL (France)9
GDPR Enforcement Tracker1
EBA1

By regulation — last 90 days

GDPR76
National Transposition25
EU Amendment14
EU Legislative Procedure5
GDPR|NIS2 Directive3
GDPR|Data Governance Act2

Enforcement volume — last 6 months

1
Jan
1
Feb
5
Mar
24
Apr
124
May
3
Jun
2
Jul
2
Sept
1
Jan

220 decisions (showing latest 30)

EUR-LexEU AmendmentMedium

Directive 2002/87/EC of the European Parliament and of the Council of 16 December 2002 on the supplementary supervision of credit institutions, insurance undertakings and investment firms in a financial conglomerate and amending Council Directives 73/239/EEC, 79/267/EEC, 92/49/EEC, 92/96/EEC, 93/6/EEC and 93/22/EEC, and Directives 98/78/EC and 2000/12/EC of the European Parliament and of the Council

Official EU publication (2027-01-30): Directive 2002/87/EC of the European Parliament and of the Council of 16 December 2002 on the supplementary supervision of credit institutions, insurance undertakings and investment …

View source ↗
EUR-LexEU AmendmentMedium

Directive 2005/29/EC of the European Parliament and of the Council of 11 May 2005 concerning unfair business-to-consumer commercial practices in the internal market and amending Council Directive 84/450/EEC, Directives 97/7/EC, 98/27/EC and 2002/65/EC of the European Parliament and of the Council and Regulation (EC) No 2006/2004 of the European Parliament and of the Council (Unfair Commercial Practices Directive) (Text with EEA relevance)Text with EEA relevance

Official EU publication (2026-09-27): Directive 2005/29/EC of the European Parliament and of the Council of 11 May 2005 concerning unfair business-to-consumer commercial practices in the internal market and amending Coun…

View source ↗
EUR-LexEU AmendmentMedium

Directive 2011/83/EU of the European Parliament and of the Council of 25 October 2011 on consumer rights, amending Council Directive 93/13/EEC and Directive 1999/44/EC of the European Parliament and of the Council and repealing Council Directive 85/577/EEC and Directive 97/7/EC of the European Parliament and of the Council (Text with EEA relevance)Text with EEA relevance

Official EU publication (2026-09-27): Directive 2011/83/EU of the European Parliament and of the Council of 25 October 2011 on consumer rights, amending Council Directive 93/13/EEC and Directive 1999/44/EC of the Europea…

View source ↗
EUR-LexNational TranspositionMedium

Commission Directive 2003/91/EC of 6 October 2003 setting out implementing measures for the purposes of Article 7 of Council Directive 2002/55/EC as regards the characteristics to be covered as a minimum by the examination and the minimum conditions for examining certain varieties of vegetable species (Text with EEA relevance)

Official EU publication (2026-07-01): Commission Directive 2003/91/EC of 6 October 2003 setting out implementing measures for the purposes of Article 7 of Council Directive 2002/55/EC as regards the characteristics to be…

View source ↗
EUR-LexNational TranspositionMedium

Commission Directive 2003/90/EC of 6 October 2003 setting out implementing measures for the purposes of Article 7 of Council Directive 2002/53/EC as regards the characteristics to be covered as a minimum by the examination and the minimum conditions for examining certain varieties of agricultural plant species (Text with EEA relevance)

Official EU publication (2026-07-01): Commission Directive 2003/90/EC of 6 October 2003 setting out implementing measures for the purposes of Article 7 of Council Directive 2002/53/EC as regards the characteristics to be…

View source ↗
EUR-LexEU AmendmentMedium

Regulation (EU) 2019/816 of the European Parliament and of the Council of 17 April 2019 establishing a centralised system for the identification of Member States holding conviction information on third-country nationals and stateless persons (ECRIS-TCN) to supplement the European Criminal Records Information System and amending Regulation (EU) 2018/1726

Official EU publication (2026-06-12): Regulation (EU) 2019/816 of the European Parliament and of the Council of 17 April 2019 establishing a centralised system for the identification of Member States holding conviction i…

View source ↗
EUR-LexEU AmendmentMedium

Regulation (EU) 2023/988 of the European Parliament and of the Council of 10 May 2023 on general product safety, amending Regulation (EU) No 1025/2012 of the European Parliament and of the Council and Directive (EU) 2020/1828 of the European Parliament and the Council, and repealing Directive 2001/95/EC of the European Parliament and of the Council and Council Directive 87/357/EEC (Text with EEA relevance)

Official EU publication (2026-05-29): Regulation (EU) 2023/988 of the European Parliament and of the Council of 10 May 2023 on general product safety, amending Regulation (EU) No 1025/2012 of the European Parliament and …

View source ↗
EUR-LexEU AmendmentMedium

Regulation (EU) 2018/1724 of the European Parliament and of the Council of 2 October 2018 establishing a single digital gateway to provide access to information, to procedures and to assistance and problem-solving services and amending Regulation (EU) No 1024/2012 (Text with EEA relevance)

Official EU publication (2026-05-20): Regulation (EU) 2018/1724 of the European Parliament and of the Council of 2 October 2018 establishing a single digital gateway to provide access to information, to procedures and to…

View source ↗

Frequently asked questions

Which EU data protection authority issues the most GDPR fines?

Italy's Garante and France's CNIL issue the highest volume of enforcement decisions annually. Ireland's DPC handles many Big Tech cases due to EU headquarters presence — including the record €1.2 billion Meta fine (2023). The Spanish AEPD and Dutch AP are most active against smaller organisations and public bodies.

What is the maximum fine under GDPR?

GDPR Article 83 sets maximum fines at €20 million or 4% of global annual turnover — whichever is higher. Tier 1 infringements (e.g. insufficient legal basis, data subject rights violations) carry up to €10 million or 2% of turnover. Tier 2 infringements (e.g. unlawful processing, international transfers) carry the full €20 million / 4% ceiling.

When does EU AI Act enforcement start?

EU AI Act enforcement is phased: prohibited AI practices banned from February 2, 2025; GPAI model rules from August 2, 2025; high-risk AI system obligations from August 2, 2026. National market surveillance authorities handle enforcement; the European AI Office oversees general-purpose AI models above 10^25 FLOPs.

What does NIS2 enforcement look like?

NIS2 (Directive 2022/2555) required EU member state transposition by October 17, 2024. Essential entities face fines up to €10 million or 2% of global turnover; important entities up to €7 million or 1.4% of turnover. National CSIRTs and competent authorities handle enforcement. Management board members can be held personally liable for repeated non-compliance.

Get weekly enforcement briefings

Every Monday: the week's top EU enforcement actions, curated by regulation and authority. Free for all EuroComply users.

Sign in or create a free account to subscribe to weekly enforcement alerts.

Data sourced from official EU supervisory authority publications. For informational purposes only. Not legal advice. Editorial policy