Cleo
Company
Request a Demo
Anaelle GuezNaomie Halioua
Request a Demo
Cleo

AI-powered regulatory intelligence.

contact@cleolabs.co

Solutions

  • Due Diligence
  • Product Compliance

Company

  • About
  • Research
  • Blog
  • Compliance Guides

Jurisdictions

  • 🇪🇺 European Union
  • 🇫🇷 France
  • 🇩🇪 Germany
  • 🇬🇧 United Kingdom
  • 🇺🇸 United States

Legal

  • Privacy
  • Terms
  • Security

Events

  • VivaTech ParisJun 11–14, 2026

© 2026 Cleo Labs. All rights reserved.

GDPREU DataSOC 2 Type IIISO 27001

Data & Statistics

Regulatory compliance in numbers

Key enforcement data, regulatory deadlines, and penalty benchmarks across the EU. Updated for 2026.

GDPR fines by country

Cumulative GDPR enforcement fines by Data Protection Authority (2018-2025)

CountryAuthorityTotal finesNotable cases
IrelandDPC€2.8B+Meta €1.2B (2023), Meta €405M (2022)
LuxembourgCNPD€746M+Amazon €746M (2021)
FranceCNIL€450M+Google €150M (2022), Criteo €40M (2023)
ItalyGarante€140M+Clearview AI €20M (2022)
GermanyBfDI + State DPAs€90M+H&M €35M (2020)
SpainAEPD€75M+CaixaBank €6M (2022)
NetherlandsAP€40M+Uber €10M (2024)
BelgiumAPD/GBA€15M+IAB Europe €250K (2022)

Key regulatory deadlines

Major EU regulation enforcement dates (2024-2028)

RegulationDateStatusScope
DORAJan 17, 2025Active22,000+ financial entities
GPSRDec 13, 2024ActiveAll non-food consumer products
AI Act — ProhibitionsFeb 2, 2025ActiveBanned AI practices
AI Act — GPAIAug 2, 2025UpcomingGeneral-purpose AI models
NIS2 transpositionOct 17, 2024ActiveEssential and important entities
CSRD — Large companiesFY 2025UpcomingAll large EU companies
AI Act — High-riskAug 2, 2026UpcomingHigh-risk AI systems
CSRD — Listed SMEsFY 2026UpcomingListed SMEs in the EU
ESPR — First DPPs2027UpcomingBatteries, textiles, electronics
EUDR — Large companiesDec 30, 2025UpcomingCompanies importing 7 commodities
CS3D — Phase 12027UpcomingCompanies with 5,000+ employees
CSRD — Non-EU companiesFY 2028UpcomingNon-EU companies with €150M+ EU turnover

Maximum penalties by regulation

Maximum fine thresholds for major EU regulations

RegulationMaximum fineTotal collected
GDPR€20M or 4% of global turnover€4.5B+ (2018-2025)
AI Act€35M or 7% of global turnoverN/A (2025+)
DORA1% of daily global turnover per dayN/A (2025+)
NIS2€10M or 2% of global turnoverN/A (2024+)
GPSR€20M or 4% of global turnoverN/A (2024+)
CRA€15M or 2.5% of global turnoverN/A (2027+)

Know exactly what applies to you

Don't guess which regulations matter. Cleo scans your business and maps your regulatory perimeter in 5 minutes.

Start free scan