As of January 2025, three organizations had received fines under the EU General Data Protection Regulation (GDPR) for transferring data outside the European Union. The highest penalty, with the amount of 1.2 billion euros, was imposed on Meta Platforms Ireland Limited by the Irish data privacy authority Data Protection Commission (DPC).
The latest case of privacy complaint was on the 16th of January, 2025. In its complaint, the Austrian data privacy non-profit None of Your Business (noyb) addressed the data transfers from European Union by a few Chinese companies, including TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi. As of late January 2025, the case was ongoing and the amount of fine is not available.
Penalties under GDPR for transferring personal data outside the European Union as of January 2025
Characteristic
Fine in euros
Meta Platforms Ireland Limited, Ireland (May 2023)
1,200,000,000
Portuguese National Statistical Institute, Portugal (Nov 2022)
4,300,000
Bocconi University, Italy (Sep 2021)
200,000
Add this content to your personal favorites. These can be accessed from the favorites menu in the main navigation.
You have no right to use this feature.
Make sure to contact us if you are interested in scientific citation.
You can upgrade your account to enable this functionality for all statistics.
This feature is not available with your current account.Request access
fines base on violation of Art. 46 GDPR; includes insufficient legal basis for data processing and non-compliance with general data processing principles
Learn more about how Statista can support your business.
GDPR Enforcement Tracker. (January 24, 2025). Penalties under GDPR for transferring personal data outside the European Union as of January 2025 [Graph]. In Statista. Retrieved April 09, 2025, from https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. "Penalties under GDPR for transferring personal data outside the European Union as of January 2025." Chart. January 24, 2025. Statista. Accessed April 09, 2025. https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. (2025). Penalties under GDPR for transferring personal data outside the European Union as of January 2025. Statista. Statista Inc.. Accessed: April 09, 2025. https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. "Penalties under Gdpr for Transferring Personal Data outside The European Union as of January 2025." Statista, Statista Inc., 24 Jan 2025, https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker, Penalties under GDPR for transferring personal data outside the European Union as of January 2025 Statista, https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/ (last visited April 09, 2025)
Penalties under GDPR for transferring personal data outside the European Union as of January 2025 [Graph], GDPR Enforcement Tracker, January 24, 2025. [Online]. Available: https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
Profit from additional features with an Employee Account
Please create an employee account to be able to mark statistics as favorites.
Then you can access your favorite statistics via the star in the header.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
