Statistics collected from eight EU countries show that five months into the GDPR, the new data protection law is alive and kicking. DPAs have received thousands of complaints and breach notifications, and the first fines have already been imposed.
The number of complaints submitted to the DPAs by individuals. Lawsuits filed with courts are not included. Please note that the UK figure also includes complaints filed after 25 May 2018 under the previous Data Protection Act of 1998.
The number of data breach notifications submitted to Data Protection Authorities by businesses or other organisations, pursuant to Article 33 of the GDPR. Please note that the UK figure also includes notifications submitted after 25 May 2018 under the previous Data Protection Act of 1998.
Codes of Conduct (submitted)
Only a few draft codes of conduct have been submitted to Data Protection Authorities pursuant to Article 40 of the GDPR. None of these has yet been approved. We expect to see more draft codes in the coming months.