Big tech keeps getting fined. Here is the bill.

Settled claims it let children on without parental consent and kept their data, breaking COPPA.

US$300m now and US$100m once an old consent decree is lifted. No finding of liability.

Steered Search and Google Play users to its own services, breaking the Digital Markets Act.

Sold blue checkmarks that mislead users, hid ad records and blocked researchers. The first Digital Services Act fine.

Paid Telstra and Optus to pre-install Google Search as the only search app on Android phones.

Signed people up to Prime without clear consent and made it hard to cancel.

The civil penalty only. Amazon also agreed to US$1.5bn in customer refunds.

Favoured its own advertising technology over rival ad exchanges and publishers.

Showed ads dressed up as emails in Gmail without consent, and set advertising cookies without clear consent.

Sent European users' data to China without showing it was protected to EU standards.

Blocked app developers from steering users to offers outside the App Store, breaking the Digital Markets Act.

Made users pay or consent to personalised ads, with no real choice, breaking the Digital Markets Act.

Ran its App Tracking Transparency prompts in a way that disadvantaged other app makers.

A 2018 security breach exposed the accounts of millions of Facebook users.

Tied Facebook Marketplace to Facebook and set unfair terms for rival classified ad services.

Used members' data for behavioural analysis and targeted ads without a lawful basis.

Stored some users' passwords in plain text on internal systems.

Broke the commitments it gave on paying news publishers for their content.

Stopped music streaming apps telling iPhone users about cheaper ways to subscribe outside the App Store.

Set children's accounts public by default and failed to protect under 13s.

Collected children's personal information at Xbox sign up without their parents' consent.

Sent Europeans' Facebook data to the United States without adequate protection. The largest GDPR fine to date.

Relied on its terms of service, rather than consent, to justify personalised advertising.

Let personal details of hundreds of millions of users be scraped and published online.

Abused its position in Android to lock in its own apps and search. Rs 1,337.76 crore.

Exposed children's phone numbers and emails through business accounts, and set teen accounts public by default.

Misled Android users about how it collected and used their location data.

Did not tell users clearly how their data was used and shared with other Meta companies.

Used customers' data for targeted advertising without valid consent.

Confirmed by Luxembourg's administrative court in 2025.

Broke a 2012 privacy order, including over the Cambridge Analytica data leak.

Made phone makers pre-install Google Search and Chrome to get the Play Store, and paid them to leave rivals off.

Imposed at €4.34bn, cut to €4.125bn in 2022, upheld by the EU Court of Justice on 02/07/2026.

Pushed its own shopping comparison service to the top of search results and demoted rivals.

Upheld by the EU Court of Justice in 2024.