Research & analysis
Data-driven commentary on regulatory enforcement, fine trends, and compliance strategy — written by practitioners.
How DPAs actually calculate GDPR fines: a data-driven breakdown
We analysed 400+ enforcement decisions to reverse-engineer the calculation methodology used by the top 8 European supervisory authorities.
Ireland's DPC and Big Tech: why €1.2B didn't change the playbook
The record Meta fine was historic. But the structural incentives that shape DPC enforcement haven't fundamentally shifted. Here's why.
AI Act enforcement: what fines will look like in 2026
The AI Act introduces a new tier of fines reaching €35M or 7% of global turnover. We model what enforcement will look like based on GDPR precedent.
The mitigation discount: which actions actually reduce fines?
Voluntary disclosure, cooperation, and early remediation all appear in DPA decisions — but by how much do they actually move the needle?
Sector risk scores 2025: tech, finance, and healthcare lead enforcement
Our annual sector-by-sector breakdown of enforcement intensity, based on decisions issued across 47 jurisdictions in the last 12 months.
Receive enforcement analysis and regulatory updates directly in your inbox.