Regulatory Reporting Highlights Rising GDPR Enforcement and U.S. Healthcare Breach Disclosures

European privacy regulators issued roughly €1.2B in GDPR fines in 2025 and received an average of 443 personal data breach notifications per day (a reported 22% increase year over year), according to DLA Piper’s GDPR Fines and Data Breach Survey as cited by DataBreaches.net. The reporting indicates sustained enforcement since GDPR’s introduction, with cumulative penalties reaching €7.1B since 2018, alongside a continued high volume of breach notifications to data protection authorities.

In the U.S. healthcare sector, HIPAA Journal reported that November 2025 showed unusually low counts of large breaches listed on the HHS OCR breach portal (32 incidents affecting 500+ individuals), but attributed the apparent decline to reporting delays during the U.S. government shutdown (Oct 1–Nov 12, 2025) and a resulting backlog. Separately, Central Maine Healthcare disclosed a breach affecting ~145,000 individuals, with unauthorized network access occurring between Mar 19 and Jun 1, 2025 and exposure of data including names and Social Security numbers plus clinical/insurance details; notifications began in late December 2025 and credit monitoring was offered.