Fines levied under the General Data Protection Regulation (GDPR) jumped almost 40% in the past 12 months as EU regulators stepped up enforcement efforts, Financial Times reported on Tuesday, January 19.
Since starting in 2018, GDPR regulators imposed €272 million (US$330.3 million) in fines, with €159 million (US$193.1 million) in penalties levied just in the past dozen months, DLA Piper research showed, per FT. More than 50% of those penalties were levied by Italy and Germany.
“Regulators have been testing the limits of their powers this year, issuing fines for a wide variety of infringements of Europe’s tough data protection laws,” Ewa Kurowska-Tober, global co-chair of DLA Piper’s Data Protection & Security Group, told FT.
The biggest fine so far — €50 million (US$60.7 million) — was levied against Google in 2019 by CNIL, the French data protection authority. The watchdog stated that the search giant wasn’t transparent about how it collects data and doesn’t have a legal reason for personalizing advertisements.
“It is positive to see that the number and size of the fines imposed under the GDPR continue to grow,” Estelle Massé, senior policy analyst at Access Now, told FT.
“Moving forward, DPAs should not only look at fines but also use all other punitive sanctions available under the GDPR, such as the possibility to suspend data transfers or to request data acquired unlawfully to be deleted,” she said.
Industry verticals retail, hospitality, telecom, and oil have been hit with the most GDPR penalties. Germany and the Netherlands reported the most data breaches, with 121,165 notifications, up almost 20% compared to the same period in 2019.
“[Regulators] certainly haven’t had things all their own way, with some notable successful appeals and large reductions in proposed fines,” Kurowska-Tober told FT.
Ross McKean, chair of DLA Piper’s UK Data Protection & Security Group, told FT that due to the pandemic, regulators have lowered fines if a company was experiencing financial hardship.
A GDPR report issued in June by the European Commission indicated that although GDPR is considered a success, there is still more work to be done, especially concerning small and mid-sized businesses. The report also showed that there is still a degree of fragmentation since member countries have different implementation and enforcement rules.
Want more news? Subscribe to CPI’s free daily newsletter for more headlines and updates on antitrust developments around the world.
Featured News
BHP Unveils £31bn Mining Megamerger Proposal with Anglo American
Apr 25, 2024 by
nhoch@pymnts.com
ByteDance Prefers Shutdown Over Sale of TikTok Amid US Ban Threats
Apr 25, 2024 by
CPI
FCC Votes to Restore Net Neutrality Rules
Apr 25, 2024 by
nhoch@pymnts.com
Apple Rejects Spotify’s Updated App Over In-App Pricing Disclosure
Apr 25, 2024 by
CPI
FCC Set to Reinstate Net Neutrality Rules Today
Apr 25, 2024 by
CPI
Antitrust Mix by CPI
Antitrust Chronicle® – Economics of Criminal Antitrust
Apr 19, 2024 by
CPI
Navigating Economic Expert Work in Criminal Antitrust Litigation
Apr 19, 2024 by
CPI
The Increased Importance of Economics in Cartel Cases
Apr 19, 2024 by
CPI
A Law and Economics Analysis of the Antitrust Treatment of Physician Collective Price Agreements
Apr 19, 2024 by
CPI
Information Exchange In Criminal Antitrust Cases: How Economic Testimony Can Tip The Scales
Apr 19, 2024 by
CPI