Cullen International’s new benchmark shows that data protection authorities in half of the 16 surveyed European countries imposed fines on big tech companies for either General Data Protection Regulation (GDPR) or e‑Privacy Directive (ePD) infringements since the entry into application of the GDPR in May 2018.

The benchmark shows that Luxembourg is the country with the highest sum of fines imposed with €746m, followed by Ireland and France.
Amazon, WhatsApp and Google are the big tech companies which incurred in the highest sum of fines at €781m, €225m and €155.7m respectively.
The benchmark also looks at whether, in the event of GDPR infringement in multiple EU member states, big tech companies benefitted from the cooperation and consistency mechanism introduced by the GDPR. The mechanism aims to achieve the consistent application of the GDPR throughout the EU.
For more information and access to the benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
07 November 25
How are EU member states transposing NIS2? - Continued
Cullen International’s latest Benchmark continues its analysis of NIS2 transposition across 18 EU countries, focusing on cybersecurity risk-management, incident reporting, and enforcement.
05 November 25
EU member states set out emissions reduction plans in long-term strategies
Our new benchmark compares EU countries' long-term strategies, outlining their 2030 and 2040 targets, overall and sectoral (transport and power) emissions reductions, energy consumption projections, renewable energy target, potential investments needed, R&D requirements and socio-economic aspects.
30 October 25
Environmental powers of European telecommunications authorities
This Cullen International report presents data on the current environmental powers of telecommunications NRAs, their main challenges regarding environmental sustainability and their current sustainability priorities.