Global Privacy Violations & Fines

META

€1.2 Billion

Unlawful Data Transfer

The largest data protection penalty in history. Fined for illegally transferring European user data to US servers without adequate safeguards.

AMAZON

€746 Million

Consent & Transparency

Penalized for forcing customers into targeted advertising algorithms without obtaining explicit, freely given consent.

TIKTOK

€345 Million

Children's Data Breach

Heavily fined for systematically failing to protect children's privacy, including setting minor accounts to public by default.

UBER

€290 Million

Cross-Border Storage

Fined for illegally transferring European drivers' sensitive personal data to US servers over a two-year period.

WHATSAPP

€225 Million

Opaque Privacy Notice

Fined for failing to explain clearly how user data was shared with other Meta-owned companies.

GOOGLE

€150 Million

Cookie Consent Dark Pattern

Fined for using "dark patterns" that made rejecting tracking cookies significantly harder than accepting them.

H&M

€35.3 Million

Illegal Employee Surveillance

Fined for unconstitutionally monitoring hundreds of employees' private lives, medical histories, and family matters.

BRITISH AIRWAYS

£20 Million

Inadequate Security Safeguards

Fined by the ICO for weak cybersecurity safeguards that allowed hackers to harvest 400,000 customer payment cards.

Multiple European regulators hit Clearview with max €20M fines for illegally scraping biometric images from the web.

MARRIOTT

£18.4 Million

M&A Security Due Diligence Failure

Fined after acquiring Starwood Hotels without performing adequate cybersecurity due diligence, exposing 339M guest records.