€1.2B in GDPR fines issued across Europe in 2025, keeping pace with 2024 and bringing total fines since 2018 to ~€7.1B.
Ireland and France led enforcement, together accounting for over €1B last year.
But enforcement today is about more than headline fines.
Breach Notifications Surged
• Avg. 443 breach notifications per day (↑22%)
• First time daily reporting exceeded 400 since GDPR took effect
Cross-Border Exposure is Rising
• More incidents involve multi-jurisdictional data flows
• Heightened scrutiny under GDPR, NIS2, and DSA
Security and Governance Remain Core Priorities
• Regulators continue to penalize inadequate technical and organizational measures
• Cybersecurity readiness is now inseparable from GDPR compliance
2026 Takeaway
Enforcement intensity remains high, transparency expectations are rising, and cross-border compliance risk is material.
S8fe.ai supports organizations in navigating complex, multi-jurisdictional data compliance by strengthening data governance, security controls, and incident-response readiness — turning regulatory pressure into operational resilience.
Source: https://www.techradar.com/pro/eu-issued-over-eur1-2bn-in-gdpr-fines-in-2025-as-multiple-data-breaches-bite