Fines, Penalties & Data Breaches

Our “Did You Know?” section offers bite-sized facts that simplify complex GDPR rules into easy-to-understand nuggets of information. Learn something new, one fact at a time. We’re regularly adding more facts, so check back often to stay updated!

Fines, Penalties & Data Breaches

A SERIOUS BREACH MEANS TELLING PEOPLE TOO
If a data breach is likely to put people at serious risk - like identity theft or fraud - the company must tell those individuals directly, not just the regulator.

Fines, Penalties & Data Breaches

DATA BREACHES MUST BE REPORTED FAST
Once a company becomes aware of a personal data breach, the clock starts ticking: it must notify the supervisory authority within 72 hours wherever feasible.

Fines, Penalties & Data Breaches

Meta was fined over a billion euros.
Meta was fined a record 1.2 billion euros by Ireland's Data Protection Commission in May 2023 for unlawfully transferring EU user data to the United States.