PrivacyProbe Blog
Recent Privacy Enforcement Fines (2024–2026)
Published April 2026 · 5 min read
Teams often ask whether privacy enforcement is still active. It is. Below are recent examples with the fine amount, date, and official regulator source.
This page is for general information only and is not a legal opinion.
TikTok — €530 million (Ireland, April 2025)
The Irish Data Protection Commission published a decision in April 2025 concerning TikTok Technology Limited and imposed fines totalling €530 million.
Official source: DPC decision page (Inquiry into TikTok Technology Limited, April 2025).
LinkedIn — €310 million (Ireland, October 2024)
The Irish Data Protection Commission announced a final decision in October 2024 and imposed administrative fines totalling €310 million on LinkedIn Ireland.
Official source: DPC press release (Irish Data Protection Commission fines LinkedIn Ireland €310 million).
Meta (Facebook passwords) — €91 million (Ireland, September 2024)
The Irish Data Protection Commission announced a final decision in September 2024 and imposed fines totalling €91 million on Meta Platforms Ireland Limited.
Official source: DPC press release (Irish Data Protection Commission fines Meta Ireland €91 million).
Meta (token breach decisions) — €251 million (Ireland, December 2024)
In December 2024, the Irish Data Protection Commission published decisions on Meta’s token breach inquiries and imposed administrative fines totalling €251 million.
Official source: DPC decision page (Inquiries into Meta Platforms Ireland Limited (Token Breach) – December 2024).
Orange — €50 million (France, November 2024 decision; CNIL publication December 2024)
France’s CNIL announced a €50 million fine against Orange, including findings related to advertising in inboxes and cookie-consent withdrawal handling.
Official source: CNIL announcement (Orange fined €50 million).
How to use this list in practice
- Use regulator links directly in risk memos and board updates.
- Pair legal context with technical evidence from scans (what fired before consent, where, and when).
- Track repeat checks after releases so fixes do not regress.