Which country has imposed the biggest GDPR fine?

Asked by: Dr. Orrin Walker  |  Last update: April 22, 2026
Score: 4.1/5 (50 votes)

Ireland has imposed the biggest GDPR fine, issuing a record €1.2 billion penalty to Meta (Facebook) in May 2023 for unlawful data transfers to the U.S., while Luxembourg issued the second-largest, a €746 million fine to Amazon in 2021 for cookie consent issues. These large fines by Irish and Luxembourg regulators highlight their role as key enforcers, even though countries like Spain issue more fines overall.

Which country has imposed the biggest GDPR fine so far?

1. Meta GDPR fine- €1.2 billion. In May 2023, in a groundbreaking decision in the past five years of GDPR enforcement, the Irish Data Protection Commission (DPC) imposed a historic fine of €1.2 billion on US tech giant Meta.

What is the highest GDPR fine?

Biggest GDPR Fines to date (2018 – 2022)

  • #1 Meta (Facebook) — €1.2 billion ($1.3 billion) ...
  • #2 Amazon — €746 million ($781 million) ...
  • #3 Meta (Instagram) — €405 million ($427 million) ...
  • #4 Meta (Facebook & Instagram) — €390 million ($413 million) ...
  • #5 TikTok — €345 million ($374 million)

What is the largest data breach fine in history?

As of January 2025, the most significant data privacy violation fine worldwide was for social media giant Meta. In May 2023, the Data Protection Commission (DPC) of Ireland decided to fine the company with 1.2 billion euros or 1.3 billion U.S. dollars. The Chinese vehicle-for rent company Didi Global ranked second.

Why was Meta fined 1.2 billion?

...Meta's sanction is for breaching conditions set out in the pan-EU regulation governing transfers of personal data to so-called third countries (in this case the US) without ensuring adequate protections for people's information...

30 biggest gdpr fines ever recorded 2025

29 related questions found

Why did Europe fine Google?

Action: The European Commission has fined Google $3.5 billion for violating EU antitrust rules by favoring its own ad-technology services in online advertising (e.g., banner ads) over those of rival services.

What is the biggest fine ever paid?

Binance Violates the Banking Secrecy Act — $4.3 Billion

The monitor will examine Binance's accounts and transactions, certifying that the company complies with U.S. federal regulations. The Binance fine is the largest penalty in the history of the U.S. Treasury Department.

Which country has the most data breaches?

Between 2004 and October 2025, the United States recorded the highest number of data points leaked online. Overall, more than 18 billion data points were leaked in the country during the measured period. Russia ranked second, with more than five billion leaked data points.

Did United Healthcare pay the ransom?

Yes, UnitedHealth Group paid a $22 million ransom in Bitcoin to the BlackCat (ALPHV) ransomware group following the February 2024 cyberattack on its subsidiary, Change Healthcare, to regain access to encrypted systems and prevent further data leaks, though the CEO confirmed they couldn't guarantee data wasn't copied. This payment was part of a massive response effort to a breach that disrupted healthcare services nationwide, costing the company billions in total. 

What is the biggest GDPR lawsuit?

1. Meta — €1.2 billion ($1.3 billion) Facebook's parent company, Meta, now holds the biggest GDPR fine ever issued.

Who was fined $20 million for breaching GDPR?

The Information Commissioner's Office (ICO) has fined British Airways (BA) £20m for failing to protect the personal and financial details of more than 400,000 of its customers.

What is the max fine for a GDPR breach?

The UK GDPR and DPA 2018 set a maximum fine of £17.5 million or 4% of annual global turnover – whichever is greater – for infringements. The EU GDPR sets a maximum fine of €20 million (about £18 million) or 4% of annual global turnover – whichever is greater – for infringements.

What is the largest GDPR fine in the UK?

UK largest fines issued for violations of GDPR 2025

As of February 2025, the largest fine issued for violation of the General Data Protection Regulation (GDPR) in the United Kingdom (UK) was more than 22 million euros, received by British Airways in October 2020.

What country has the best data privacy?

Best Countries for Privacy and Security

  1. Switzerland. Switzerland is considered one of the most privacy-focused countries in the world. ...
  2. Iceland. Iceland has become a privacy haven due to its strong data protection laws and its stance on online freedom. ...
  3. Norway. ...
  4. Romania. ...
  5. Panama. ...
  6. Sweden.

What is the GDPR fine for Microsoft?

After the Irish data protection authority DPC had already imposed a fine of 91 million euros on Meta in September, it followed suit against LinkedIn in October: The Microsoft-owned company has to pay 310 million euros for serious data protection violations.

Which country is no. 1 in cyber security?

There's no single "No. 1" cyber security country, as rankings vary by metric (defense, offense, cybercrime), but the United States consistently leads in overall investment, capability, and market size, though countries like China, Russia, and Israel are major players, while Nordic nations like Finland, Denmark, and Estonia often rank high for low risk and strong frameworks, according to reports from 2024-2025. 

Who is the world's top 1 hacker?

There's no single "world's No. 1 hacker," as it's subjective and hackers often work in anonymity, but Kevin Mitnick is widely considered the world's most famous hacker, known for his legendary exploits in the '80s and '90s, becoming the FBI's Most Wanted before turning into a respected cybersecurity consultant, author, and speaker until his passing in 2023. Today, notorious groups like the Lazarus Group or individuals like IntelBroker are known for major 2025 attacks, while ethical hackers like Ryan Montgomery ("0day") gain fame for positive impact.
 

What is the $3000 rule in banking?

The "3000 bank rule" refers to U.S. Treasury regulations under the Bank Secrecy Act (BSA) requiring financial institutions to record and report specific information for certain transactions over $3,000, mainly involving cash or monetary instruments, to combat money laundering, including identifying the payer, recipient, and transaction details for five years. This rule covers purchases of cashier's checks, money orders, and wire transfers above this amount, mandating verification of identity and detailed record-keeping for law enforcement. 

Did TD Bank pay a $3 billion fine?

On October 10, the United States Department of Justice (DOJ) announced that TD Bank had agreed to a $3-billion settlement with the US government over charges that it repeatedly failed to detect money-laundering activities within its institution.

Which country is against Google?

"The block is indiscriminate as all Google services in all countries, encrypted or not, are now blocked in China. This blockage includes Google search, images, Gmail and almost all other products.

Does Google have to pay Russian fines?

Russian court fines Google $78 million for ignoring previous penalties. MOSCOW, Jan 14 (Reuters) - A Russian court fined Alphabet's (GOOGL.

What is the number one search engine in Europe?

Google holds a share of over 90 percent in the European search market across all devices, even higher than in its home market, the United States. Similarly, Bing remains Google's main contender in Europe, with a relatively successful share of around five percent in markets like France and the Netherlands.