The world's 20 top data protection fines
Chris Hamblin, Editor, London, 3 June 2019
The International Association of Privacy Professionals (IAPP) in the New Hampshire town of Portsmouth - whose website proclaims that "data powers the information economy and the risks are about to skyrocket" - has produced a handy reference guide to government-imposed data privacy fines around the world.
Top 20 government-imposed data privacy fines worldwide, 1999-2014
Rank/Fined entity Amount Year Country Privacy principles violated
1. Apple $32.5M 2014 US Choice and Consent
2. Google $22.5M 2012 US Collection
3. Google $17M 2013 US Collection and Notice
4. ChoicePoint $15M 2006 US Security
5. Hewlett-Packard $14,5M 2006 US Collection
6. LifeLock $12M 2010 US Accuracy, Security
7. TJ Maxx $9.8M 2009 US Security
8. Dish Network $6M 2009 US Choice and Consent
9. DirecTV $5.3M 2005 US Choice and Consent
10. HSBC $5M 2009 UK Security
11. US Bancorp $5M 1999 US Disclosure
12. Craftmatic $4.3 2007 US Choice and Consent
13. Cignet Health $4.3M 2011 US Access
14. Barclays Bank $3.8M 2013 US Use and Retention
15. Certegy Check Svs $3.5M 2013 US Accuracy
16. Playdom $3M 2011 US Collection and Notice
17. Broadcast Team $2.8M 2007 US Collection
18. Equifax, TransUn
-ion and Experian $2.5M 2000 US Access
19. CVS Caremark $2.3M 2009 US Security and Disposal
20. Norwich Union Life $1.8M 2007 UK Disclosure