Number of GDPR fines in EU healthcare steady, but average fine rises steeply

Deep dive into the life science and healthcare findings from the CMS GDPR Enforcement Tracker Report 2025.

Main takeaways

There was only a moderate increase in the number of fines imposed compared to 2024.

The most common reason for fines in the healthcare sector continues to be the lack of sufficient technical and organizational measures (TOMs).

This remained a common issue across many healthcare institutions and without a

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Weekly podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in