Since the GDPR went live one year ago, nearly 145.000 complaints have been sent to the data protection authorities of the EU.
There were 90.000 cases of illegal data transfer to unauthorized entities. Some of these data transmissions took place by accident.
The data protection authorities possesses the right to issue fines that can reach 6% of a companies annual turnover. Google had to pay a fine of 50 million euros in France for sending advertising material without the user’s consent. And a German company running a social network had to pay 20.000 Euros for missing protection of userdata. Additionally, one Austrian betting office was fined 5280 euros for an illegal video surveillance.