Regulators logged over 400 personal data breach notifications a day for first time since law came into force

GDPR fines pushed past the £1 billion (€1.2 billion) mark in 2025 as Europe's regulators were deluged with more than 400 data breach notifications a day, according to a new survey that suggests the post-plateau era of enforcement has well and truly arrived.

The figures come from the latest GDPR Fines and Data Breach Survey published by DLA Piper, which puts total fines issued across Europe last year at roughly £1 billion (€1.2 billion), up from £996 million in 2024. While that year-on-year increase is modest, regulators have now handed down €7.1 billion (£6.2 billion) in penalties since GDPR came into force in May 2018. 

The fines may look familiar, but breach reporting does not. From 28 January 2025 to the present, Europe's data protection authorities received an average of 443 personal data breach notifications a day. That's up 22 percent on the ...