Cullen International’s new benchmark shows that data protection authorities in half of the 16 surveyed European countries imposed fines on big tech companies for either General Data Protection Regulation (GDPR) or e‑Privacy Directive (ePD) infringements since the entry into application of the GDPR in May 2018.

The benchmark shows that Luxembourg is the country with the highest sum of fines imposed with €746m, followed by Ireland and France.
Amazon, WhatsApp and Google are the big tech companies which incurred in the highest sum of fines at €781m, €225m and €155.7m respectively.
The benchmark also looks at whether, in the event of GDPR infringement in multiple EU member states, big tech companies benefitted from the cooperation and consistency mechanism introduced by the GDPR. The mechanism aims to achieve the consistent application of the GDPR throughout the EU.
For more information and access to the benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
30 April 26
National implementation of the EU AI Act: a snapshot of AI laws, regulatory bodies and penalties
Our latest benchmark provides an overview of the national laws (proposed or adopted) to implement the AI Act, including measures such as the designation of competent authorities, the set-up of regulatory sandboxes and the establishment of a framework on penalties.
29 April 26
Video game regulation and child protection: limited binding rules across the Americas
Our latest benchmark covers online gaming regulation in selected countries in the Americas region.
28 April 26
Postal redirection services are offered by all incumbent operators, despite not being required by regulation in most cases
Our new benchmark gives an overview of whether postal redirection services are included under the universal service obligation across different European countries. It also provides information on whether such services are offered commercially and their pricing.