Cullen International’s new benchmark shows that data protection authorities in half of the 16 surveyed European countries imposed fines on big tech companies for either General Data Protection Regulation (GDPR) or e‑Privacy Directive (ePD) infringements since the entry into application of the GDPR in May 2018.

The benchmark shows that Luxembourg is the country with the highest sum of fines imposed with €746m, followed by Ireland and France.
Amazon, WhatsApp and Google are the big tech companies which incurred in the highest sum of fines at €781m, €225m and €155.7m respectively.
The benchmark also looks at whether, in the event of GDPR infringement in multiple EU member states, big tech companies benefitted from the cooperation and consistency mechanism introduced by the GDPR. The mechanism aims to achieve the consistent application of the GDPR throughout the EU.
For more information and access to the benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
19 December 25
CSRD transposition: Belgium, Denmark, Finland and Slovenia transpose the “stop-the-clock” directive
Cullen International’s updated benchmark tracks the progress made by the 27 EU member states in transposing the CSRD and the related “stop-the-clock” directive.
19 December 25
Global trends in AI regulation
Our latest Global Trends benchmark compares policies and regulations on artificial intelligence (AI) across 14 jurisdictions around the world.
19 December 25
Implementation of European Media Freedom Act: general overview in 12 EU member states
Our new Media benchmark shows if there are initiatives/rules in the selected countries which aim to put into application the EU Media Freedom Act (EMFA). If yes, it describes the scope of the main measures proposed. The benchmark also provides information on the next legislative or regulatory steps.