EU Data Breach Notifications Surge as GDPR Changes Loom

DLA Piper's January 2026 report finds EU data breach notifications rose 22% year-on-year to an average of 443 per day and GDPR fines remained high (≈EUR1.2bn in 2025), reversing a prior downward trend; the aggregate fines since GDPR implementation total ≈EUR7.1bn. The report highlights legal developments — including CJEU rulings on compensable non-material damage and ongoing legislative work such as the EU Digital Omnibus, NIS2 and DORA — and warns that regulators are focusing on serious incidents and supply-chain security while considering changes to notification thresholds.