EU issued over €1.2bn in GDPR fines in 2025 as multiple data breaches bite

  • Personal data breach reports rose 22% year-over-year in 2025
  • Ireland has issued some of the GDPR’s biggest fines, including 2025’s biggest
  • Geopolitical tensions, new tech and new laws are all to blame

European regulators handed out over €1.2 billion ($1.4 billion) in GDPR-related fines throughout 2025, marking only a small increase compared with the year before despite a sharp rise in data breach notifications.

Data from DLA Piper found regulators handled an average of 443 personal data breach reports every single day from January 28, 2025 onwards, marking a considerable 22% rise compared with 2024. This was also the first year that breach notifications exceeded the 400 mark since GDPR came into force.

But instead of blaming the increase on one single cause, DLA Piper suggests a combination of multiple factors was responsible for the breaches.

Data breach notifications were up last year in the EU

“It seems likely that geopolitical tensions, the abundance of new technologies available to threat actors to launch cyber-attacks, and the raft of new laws including incident notification requirements are all contributing factors,” the report concluded.

However, enforcement remained pretty concentrated with Ireland issuing the most GDPR fines. Ireland was responsible for issuing the highest fine in 2025, hitting TikTok with a €530 million fine. The country also holds the record for the highest-ever GDPR fine – a 2023 €1.2 billion fine against Meta. In total, Ireland has accounting for €4.04 billion in GDPR fines since the act was introduced.

Besides being hit with some of the biggest fines, Big Tech is also a key target in penalties with tech giants accounting for nine of the 10 biggest GDPR fines ever issued.

“The fact that combined GDPR fines held steady at EUR 1.2 billion shows regulators remain highly active, particularly in areas such as information security, international data transfers, transparency and the complex interplay between AI innovation and data protection laws,” DLA Piper UK Data, Privacy and Cybersecurity practice Chair Ross McKean wrote.

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Read more @ TechRadar

Latest posts

Amazon Ring’s Super Bowl ad sparks backlash amid fears of mass surveillance

The ad promotes Ring cameras’ new capability to search neighborhoods for a lost dog. | Screenshot from Ring video Ring's new Search Party feature has...

The Toyota Highlander is now a three-row electric SUV with 320 miles of range

Toyota unveiled the new 2027 Highlander, a fully redesigned midsize SUV that marks the brand's first three-row electric vehicle for the US market and...

Discord says ‘vast majority’ of users won’t see its new age verification setup

On Tuesday, Discord released an update clarifying that the "vast majority of people can continue using Discord exactly as they do today," without needing...

My favorite Switch 2 controller is 30 percent off for today only

The EasySMX S10 is a fantastic wireless controller for the Switch 2 that offers nearly as many features as Nintendo’s $90 gamepad. I ranked...