Since the General Data Protection Regulation (GDPR) was introduced three years ago to address the way companies operating within the EU use, process, and store consumers’ personal data, the agency has imposed fines on companies and organizations across Europe.

For the biggest fines recorded, Google led the list with a £50 million fine after a French regulator ruled that the company had failed to disclose its data processing declaration to its users.

H&M followed with a fine of £35.3 million after being fined by German regulators in 2020 for secretly monitoring hundreds of its employees.

British Airways made the list with a £20 million fine in 2019 after users of its websites were directed to a fraudulent site.

Marriott International Hotels was also on the list with a £18.4 million fine after a 2014 hack was revealed in 2020.

For more information, read the original story in BBC.