As of January 2025, three organizations had received fines under the EU General Data Protection Regulation (GDPR) for transferring data outside the European Union. The highest penalty, with the amount of 1.2 billion euros, was imposed on Meta Platforms Ireland Limited by the Irish data privacy authority Data Protection Commission (DPC).
The latest case of privacy complaint was on the 16th of January, 2025. In its complaint, the Austrian data privacy non-profit None of Your Business (noyb) addressed the data transfers from European Union by a few Chinese companies, including TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi. As of late January 2025, the case was ongoing and the amount of fine is not available.
Penalties under GDPR for transferring personal data outside the European Union as of January 2025
Characteristic
Fine in euros
Meta Platforms Ireland Limited, Ireland (May 2023)
1,200,000,000
Portuguese National Statistical Institute, Portugal (Nov 2022)
fines base on violation of Art. 46 GDPR; includes insufficient legal basis for data processing and non-compliance with general data processing principles
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how Statista can support your business.
GDPR Enforcement Tracker. (January 24, 2025). Penalties under GDPR for transferring personal data outside the European Union as of January 2025 [Graph]. In Statista. Retrieved June 06, 2025, from https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. "Penalties under GDPR for transferring personal data outside the European Union as of January 2025." Chart. January 24, 2025. Statista. Accessed June 06, 2025. https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. (2025). Penalties under GDPR for transferring personal data outside the European Union as of January 2025. Statista. Statista Inc.. Accessed: June 06, 2025. https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker. "Penalties under Gdpr for Transferring Personal Data outside The European Union as of January 2025." Statista, Statista Inc., 24 Jan 2025, https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
GDPR Enforcement Tracker, Penalties under GDPR for transferring personal data outside the European Union as of January 2025 Statista, https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/ (last visited June 06, 2025)
Penalties under GDPR for transferring personal data outside the European Union as of January 2025 [Graph], GDPR Enforcement Tracker, January 24, 2025. [Online]. Available: https://www.statista.com/statistics/1403854/eu-data-transfer-gdpr-fines/
