DLA Piper’s latest GDPR survey reveals a 22% surge in breach notifications — the first time daily figures have crossed 400 since GDPR came into force in 2018. After years of plateau, the trend has sharply reversed.
The drivers? A convergence of geopolitical instability, AI-enabled threat actors, and expanding regulatory disclosure requirements under NIS2 and DORA — on top of GDPR.
For RSSI, CIOs, CTOs, and legal or compliance leaders, the numbers carry a clear message:
→ €1.2 billion in GDPR fines in 2025. Enforcement isn’t slowing.
→ €7.1 billion in cumulative fines since 2018.
→ New cybersecurity laws now impose personal liability on board members and senior management.
This is no longer a back-office compliance issue. It sits squarely on the executive agenda.
The question isn’t whether your organization will face a breach. It’s whether your defenses, governance, and incident response are ready when it happens.
How S8fe.ai Helps
S8fe.ai enables organizations to categorize data against multiple regulations, provides risk assessments, and clear compliance posture — turning regulatory complexity into operational control.
Source: https://www.dlapiper.com/en/news/2026/02/personal-data-breaches-in-europe-reach-443-per-day-in-dramatic-22-jump-dla-piper-analysis-reveals