Data Protection Statistics
Key facts and figures from the IQWorks Data Observatory. All statistics are sourced from verified public records and updated regularly.
Last updated: August 22, 2026 | Source: IQWorks Data Observatory — iqworks.ai/data
As of August 2026, global privacy enforcement authorities have issued EUR 12.8 billion in fines across 415 enforcement actions. Meanwhile, 18.3 billion records have been exposed in 953 documented data breaches, and 127 of 174 tracked countries have enacted comprehensive privacy legislation.
Source: IQWorks Data Observatory — iqworks.ai | Last updated: 2026-08-22
Enforcement & Fines
EUR 12.8 billion
Total enforcement fines
Cumulative fines from 415 enforcement actions issued by data protection authorities worldwide, spanning 2018 to 2026.
Source: IQWorks Data Observatory, 26 regulatory sources
415
Enforcement actions tracked
Individual enforcement actions from 26+ data protection authorities including CNIL, ICO, DPC Ireland, Garante, and more.
Source: IQWorks Data Observatory
Data Breaches
18.3 billion
Records exposed in data breaches
Total records compromised across 953 documented data breaches from 2007 to 2026.
Source: IQWorks Data Observatory, Have I Been Pwned
953
Data breaches tracked
Top industries affected: Technology (207), Gaming (161), Other (137).
Source: IQWorks Data Observatory, Have I Been Pwned
Global Privacy Regulation
127
Countries with privacy laws
Of 174 countries tracked, 127 have enacted comprehensive privacy legislation and 10 have laws in draft.
Source: IQWorks Data Observatory
174
Countries tracked
Complete regulatory profiles covering privacy law status, DPA enforcement, breach notification requirements, DPO obligations, and cross-border transfer restrictions.
Source: IQWorks Data Observatory
Ransomware & Cyber Incidents
$286 million
Total ransom demanded
Across 59 major ransomware incidents. $38 million was actually paid.
Source: IQWorks Data Observatory, CISA KEV
1,551
CISA KEV vulnerabilities
Known exploited vulnerabilities in the CISA catalog, of which 313 are associated with ransomware campaigns.
Source: CISA Known Exploited Vulnerabilities Catalog
About This Data
All statistics are sourced from the IQWorks Data Observatory, which aggregates data from 26+ regulatory authorities, Have I Been Pwned, and the CISA Known Exploited Vulnerabilities catalog. Data is verified against primary sources and updated regularly.
View full methodology