Is there a list of all GDPR fines imposed?

Answer:

No, there is no central list of all GDPR fines. The activity reports of the supervisory authorities may provide some insight. The State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia, Germany, for example, publishes annual activity reports. The current report of the Federal Commissioner for Data Protection and Freedom of Information (2024) can also provide guidance. In addition, the law firm CM/S attempts to collect information on specific fines in its EnforcementTracker.

However, it must be assumed that the number of fines actually imposed is significantly higher. From the perspective of the supervisory authorities, too much transparency regarding fines is probably not desirable – if those responsible are uncertain about the specific amount of fines to be expected, this may, under certain circumstances, increase the deterrent effect of possible fines.