GDPR Enforcement Actions, Fines Pile Up

AggregateIQ has been accused of violating the General Data Protection Regulation (GDPR) by using personal data of United Kingdom individuals to target them with political advertising messages on social media.
The Information Commissioner’s Office (ICO) has ordered the company to erase any personal data that is retained on its servers.

Meanwhile, in France, La Commission Nationale de L’Informatique et des Libertes (CNIL) found that a mobile ad network illegally obtained the consent of more than 67 million people. The company was ordered to change its consent practice and purge all data collected. In other cases, fines ranging from 4,300€ to 400,000€ are being slapped on companies in violation of the GDPR. It is obvious that European Union regulators are wasting no time taking enforcement action and fining entities for violations.