Support Centre
Enforcement Reports
workspace-icon
Back

Enforcement Reports

This Cross-Border Chart supports the Global Enforcement Dashboard by spotlighting annual reports or enforcement statistics released by global data protection and privacy authorities. Current non-inclusion of certain jurisdictions does not preclude the applicability of enforcement reports within those countries. 

Click any icon to access links to annual reports from global supervisory authorities and key enforcement statistics from the latest report.

Annual reports from previous years are also located under 'Latest Report'.

  • The relevant supervisory authority has published an annual report for data protection and privacy.
  • Click to view information for additional detail.
  • The relevant supervisory authority has not published an annual report for data protection and privacy.
    title
  • Authority
  • Latest report
  • Key statistics from latest report
  • Albania
    • 2021

      You can read the annual report for 2021 in Albanian here and in English here.

      All annual reports can be accessed here.

    • Total Complaints Received: 992. In addition, 44 complaints were carried over from the previous year. 

      Total Investigations: Information not available.

      Total Breach Notifications Received: Information not available. However, the report outlines that significant data breaches affected information on voters, salaries, and licence plates.

      Total Enforcement Notices Issued: 39, of which: 36 orders to provide information; one dismissal; and 2 rejection decisions.

      Total No. Monetary Penalties Issued: 2.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: No further information.

  • Argentina
    • 2021

      You can read the report for 2021, only available in Spanish, here.

      All annual reports can be accessed, only available in Spanish, here.

    • Total Complaints Received: 386 complaints under the Personal Data Protection Act, Act No. 25.326 of 2000 ('the Act') and 12,664 complaints under Law No. 26.951 of 2014 on the creation of the National Do Not Call Registry ('the DNC Registry') (only available in Spanish here).

      Total Investigations: 8.

      Total Breach Notifications Received: Information not available.

      Total Enforcement Notices Received: 83 sanctioning resolutions were signed for violations of both the Act and the DNC Registry.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: The AAIP processed 4,192 requests with respect to the National Registry of Databases.

  • Australia
    • 2021-22

      You can read the annual report for 2021-22 here.

      All annual reports can be accessed here.

    • Total Complaints Received: 2,544

      Total Investigations: Information not available. However, the OAIC finalised a number of significant privacy ex officio investigations focused on the collection of biometric information and the use of high privacy impact facial recognition technologies.

      Total Breach Notifications Received: 853.

      Total Enforcement Notices Issued: 14 privacy determinations.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: No further information.

  • Austria
    • 2021

      You can read the annual report for 2021, only available in German, here.

      All annual reports can be accessed, only available in German, here.

    • Total Complaints Received: 6,051 complaints made in Austria; 407 complaints made abroad; and 401 international complaints made in Austria.

      Total Investigations: 274 initiated.

      Total Breach Notifications Received: 1,316.

      Total Enforcement Notices Issued: Information not available.

      Total No. Monetary Penalties Issued: 56.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: The highest monetary penalty imposed amounted to €9.5 million.

  • Canada Federal
    • 2021-22

      You can read the annual report for 2021-2022 here.

      All annual reports can be accessed here.

    • Total Complaints Received: 906 complaints under the Privacy Act 1985 ('the Privacy Act') accepted; 427 complaints under the Personal Information Protection and Electronic Documents Act 2000 ('PIPEDA') accepted.

      Total Investigations: Information not available.

      Total Breach Notifications Received: 645 data breach notifications under PIPEDA.

      Total Enforcement Notices Issued: Information not available.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: 303 PIPEDA complaints were resolved through early resolution; 55 PIPEDA complaints were closed through standard investigation. 319 Privacy Act complaints were resolved through early resolution; 474 Privacy Act complaints were closed through standard investigation. 

  • China
    • The CAC does not issue annual reports.

      The key statistics presented have been provided by Barbara Li, Partner in the Tax and Business Advisory Team at PwC China.

    • Total Complaints Received: Information is not made publicly available.

      Total Investigations: Information is not made publicly available.

      Total Breach Notifications Received: Information is not made publicly available.

      Total Enforcement Notices Issued: Information is not made publicly available.

      Total No. Monetary Penalties Issued: Information is not made publicly available.

      Total Sum of Monetary Penalties Issued: Information is not made publicly available.

      Other: No further information.

  • Colombia
    • 2020-21

      You can read the annual report for the period September 2020 to August 2021, only available in Spanish, here.

      A repository of all annual reports issued by the SIC is not available.

       

    • Total Complaints Received: Information not available.

      Total Investigations: Information not available.

      Total Breach Notifications Received: Information not available.

      Total Enforcement Notices Issued: Information not available.

      Total No. Monetary Penalties Issued: 146.

      Total Sum of Monetary Penalties Issued: COP 11.902.508.430 (approx. €2,714,268).

      Other: 90% of complaints refer to the application of Statutory Law 1581 of 2012 (October 17) Which Issues General Provisions for the Protection of Personal Data ('the Data Protection Law') (only available in Spanish here) regarding the processing of financial data.

  • FTC
    • 2020

      You can read the Privacy and Security Update for 2020 here.

      All Privacy and Security Updates can be accessed here, under the 'Reports' drop down menu.

    • Total Complaints Received: 1,464,137.

      Total Investigations: Information not available.

      Total Breach Notifications Received: Information not available.

      Total Enforcement Notices Issued: 17.

      Total No. Monetary Penalties Issued: 8, of which: 4 in relation to Section 13(b) and Section 5 of the Federal Trade Commission Act of 1914 ('the FTC Act'); 4 in relation to civil penalties and Section 5 of the FTC Act.

      Total Sum of Monetary Penalties Issued: In relation to Section 13(b) and Section 5 of the FTC Act: up to $8.74 million. In relation to civil penalties and Section 5 of the FTC Act: $8.74 million.

      Other: No further information.

  • Israel
    • The key statistics preseted relate to enforcement actions during 2020 and have been provided by Dan Or-Hof, Founder of Or-Hof Tech & IP Legal Services.

    • Total Complaints Received: 1,470 applications were submitted to the PPA. The applications included complaints, professional questions by attorneys and cybersecurity advisors, and requests for general compliance guidance. 224 out of 1,470 applications were classified as complaints.

      Total Investigations: 405.

      Total Breach Notifications Received: Information not available. 

      Total Enforcement Notices Issued: 143.

      Total No. Monetary Penalties Issued: None.

      Total Sum of Monetary Penalties Issued: Not applicable.

      Other: The PPA adopted a policy of mass audits and issuing orders to implement controls and prefers this approach over imposing fines.

  • Mauritius
    • Data Protection Office ('the Office').

    • 2021

      You can read the annual report for 2021 here.

      All annual reports can be accessed here.

    • Total Complaints Received: 74.

      Total Investigations: Information not available.

      Total Breach Notifications Received: 55.

      Total Enforcement Notices Issued: 3.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: The Office closed 19 complaints and 6 cases were resolved through amicable resolution.

  • Moldova
    • 2021

      You can read the annual report for 2021 here.

      All annual reports can be accessed here.

    • Total Complaints Received: 860.

      Total Investigations: 243.

      Total Breach Notifications Received: Information not available.

      Total Enforcement Notices Issued: 43.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: Law No. 133 of 8 July 2011 on personal data protection ('the Law') does not require data breaches to be notified to authorities or data subjects. In addition, the Law does not explicitly address the issuance of monetary penalties, however, it provides for liability under civil, administrative, or criminal law.

  • OCR
    • 2020

      You can read the annual report for 2020 here.

      All annual reports can be accessed here.

    • Total Complaints Received: 27,182. 

      Total Investigations: 2,171.

      Total Breach Notifications Received: 663 notifications received for breaches impacting more than 500 individuals.

      Total Enforcement Notices Issued: Not applicable.

      Total No. Monetary Penalties Issued: 10.

      Total Sum of Monetary Penalties Issued: $13,554,900.

      Other: No further information.

  • Russian Federation
    • 2021

      The Roskomnadzor has released a short general performance report for 2021, only available in Russian, here. Please note that this is in addition to the annual report that gets released by the authority.

      All annual reports can be accessed, only available in Russian, here.

      The key statistics presented consider the short general performance report, with further details provided by Irina Anyukhina, Coordinating Partner of the Data Protection, IP, and TMT practice areas at ALRUD Law Firm.

    • Total Complaints Received: 4,268, including 1,154 (together with 65 court claims) complaints based on unlawful dissemination (i.e. publication) of personal data.

      Total Investigations: 595 scheduled inspections, 14 unscheduled inspections, and 3,787 monitoring events. As a result of scheduled inspections, 1,620 violations of data protection requirements were indicated, together with 1,343 violations of data protection requirements indicated in the course of monitoring events.

      Total Breach Notifications Received: Not applicable. 

      Total Enforcement Notices Issued: 4,708 administrative offences and 475 orders to rectify the violation.

      Total No. Monetary Penalties Issued: Information not available.

      Total Sum of Monetary Penalties Issued: Information not available.

      Other: There are no requirements to notify the Roskomnadzor and/or data subjects in case of any data breach under Russian data protection laws.

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.