--- title: "GDPR Bares Its Fangs: €315 Million in Penalties over Just Three Days" description: In only three days, businesses big and small with customers in the European Union have been told to cough up a cumulated €315 million in penalties after failing to comply with the GDPR rulebook. image: https://businessinsights.bitdefender.com/hubfs/euros.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Jul 10, 2019 # GDPR Bares Its Fangs: €315 Million in Penalties over Just Three Days Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days&utm_medium=social&utm_source=facebook) In only three days, businesses big and small with customers in the European Union have been told to cough up a cumulated €315 million in penalties after failing to comply with the GDPR rulebook. For the first time since the EU’s General Data Protection Regulation took effect in May 2018, it’s hurting the bottom lines of those who fail to comply. One of the biggest names connected with the first GDPR fines this week was [British Airways](https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/07/statement-ico-announces-intention-to-fine-british-airways/), which incurred £183.39 million (204 million EUR / 230 million USD) in penalties for a 2018 breach that affected 500,000 customers. The [Marriott](https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/07/statement-intention-to-fine-marriott-international-inc-more-than-99-million-under-gdpr-for-data-breach/) hotel chain, which disclosed late last year that hackers accessed its guest reservation database and exfiltrated customer data for years, got fined £99,200,396 (€110,367,384) the next day. These are only the most publicized cases, not necessarily the most recent ones. Marriott said it would appeal the decision by the UK’s Information Commissioner’s office. On Sunday, Romanian news outlet business-review.eu [reported](http://business-review.eu/business/legal/first-fine-on-gdpr-202887) that Unicredit Bank was the first recipient of a GDPR-related fine in Romania -- 130,000 euros. An investigation into personal data use by Romania’s National Supervisory Authority ties the sanction to a “failure to apply appropriate technical and organizational measures, both in the determination of the processing means and the processing operations themselves, to effectively implement data protection principles, such as minimizing data to a minimum and integrating the necessary safeguards in the processing, to meet the GDPR requirements and to protect the rights of the data subjects,” the publication said. Also in Romania, named by Deloitte as one of the top five EU countries with investigations pending under the GDPR, data protection authorities fined hotel chain [World Trade Center](https://www.news.ro/economic/o-noua-sanctiune-in-aplicarea-gdpr-world-trade-center-bucuresti-a-fost-amendat-cu-peste-71-000-lei-1922402008002019071619054660) 71.028 lei (15.043 euros) after someone took an unauthorized photo of personal details, printed on a piece of paper, covering 46 customers. If data protection authorities have been indulgent until now, focusing mostly on applying corrective measures as companies achieve GDPR compliance, starting this week we can no longer say the same thing. For the first time since the GDPR went into effect, organizations that fail to safeguard customer data are incurring painful fines. ### Explore More Topics - [Enterprise Security (765)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (206)](https://businessinsights.bitdefender.com/topic/threat-research) - [SMB Security (193)](https://businessinsights.bitdefender.com/topic/smb-security) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [Ransomware (172)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (139)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (136)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (136)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (127)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (121)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Threat Intelligence (82)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [IT Compliance & Regulations (75)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (59)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (55)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (47)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (39)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (24)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (10)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (5)](https://businessinsights.bitdefender.com/topic/podcast) - [AI (2)](https://businessinsights.bitdefender.com/topic/ai) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Dixons Carphone Hack Compromises 5.9 Million Cards, Draws £400m Fine](https://businessinsights.bitdefender.com/dixons-carphone-hack-compromises-5.9-million-cards-draws-400m-fine?hsLang=en-us) ### [Unpatchable Windows AtomBombing Attack Plugged By Hypervisor Introspection](https://businessinsights.bitdefender.com/unpatchable-windows-atombombing-attack-plugged-by-hypervisor-introspection?hsLang=en-us) ### [With Nine Months to Go, Only 14 Percent of Companies Are Ready for California’s New Privacy Law](https://businessinsights.bitdefender.com/with-nine-months-to-go-only-14-percent-of-companies-are-ready-for-californias-new-privacy-law?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender\_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2019-07-10T14:29:57.850Z", "datePublished" : "2019-07-10T14:29:57.000Z", "headline" : "GDPR Bares Its Fangs: €315 Million in Penalties over Just Three Days", "image" : [ "https://businessinsights.bitdefender.com/hubfs/euros.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/gdpr-beginning-to-show-its-fangs-315-million-in-penalties-over-just-three-days", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```