GDPR Enforcement

GDPR enforcement refers to the regulatory actions and compliance monitoring conducted by data protection authorities across the EU and EEA to ensure organizations follow the General Data Protection Regulation. This includes investigations, fines, corrective orders, and audits that have resulted in multi-billion dollar penalties against major tech companies and other organizations handling personal data. For enterprises, GDPR enforcement actions establish precedent for what regulators consider violations, making them essential to monitor for understanding evolving compliance expectations and avoiding similar costly breaches.

1 item

EnforcementEU2026-07-29

Italy's Garante Fines Character.AI Operator €158,000 for Data Protection and Age-Control Failures, Signaling Broader EU Enforcement Risk for Consumer AI Platforms

Italy's data protection authority, the Garante, fined Character Technologies, the U.S.-based operator of the generative AI platform Character.AI, €158,000 for violations of data protection rules. The enforcement action centers on failures related to age verification, lawful basis for processing, and user data controls on a consumer-facing AI service. The decision is one of the first EU data protection enforcement actions to target a generative AI platform directly.

Character.AI Italy Garante GDPR enforcement age verification data protection consumer AI EU privacy