Over 160,000 Companies Notify Regulators of GDPR Breaches

DLA Piper’s 2025 review of GDPR activity reports a 22% rise to an average of 443 daily breach notifications—led by Germany, the Netherlands, and Poland—potentially driven by geopolitical unrest and AI-enabled threats. While notifications increased, total fines stayed roughly flat at €1.2bn (with €4bn cumulatively from Ireland since 2018), and the Irish DPC issued the year’s largest penalty (€530m to TikTok) amid ongoing criticism over case handling.