New Surfshark research finds that 10 of the world’s most popular social media platforms have faced more than $26 billion in privacy-related fines and settlements since 2020 across Europe, the US, Australia, and South Korea.
“These fines and settlements highlight the consequences social media companies can face over how they handle personal data. Some cases have already led to concrete changes, such as making tracking cookies easier to reject. But a bigger penalty does not automatically mean users are better protected, and if platforms treat it as a cost of doing business, the impact may be limited.
The real test is whether these cases drive changes that are implemented and sustained: more responsible data collection, greater transparency, and stronger safeguards, especially for children. The size of the penalty matters, but what it changes for users matters more,” says Dr. Luís Costa, Research Lead at Surfshark.
Since 2020, 10 of the world’s most popular social media platforms have faced more than $26 billion in privacy-related fines and settlements across Europe, the US, Australia, and South Korea.
Meta-owned platforms accounted for 91% ($23.7 billion) of the total, with Facebook alone responsible for $14.3 billion and Instagram for $9.4 billion. TikTok ranked a distant third at $1.6 billion.
Mid-tier totals included LinkedIn ($360 million), YouTube ($222 million), and X ($151 million), while Snapchat ($35 million) and Reddit ($19 million) recorded smaller amounts. Discord registered only $0.9 million, while Pinterest was the only platform with no qualifying fines or settlements identified in the research.
The US imposed the most privacy-related fines
The US imposed a total of $20.9 billion in fines on social media platforms, accounting for 80% of total global fines. The US also issued the largest single penalty in the research, a $17.1 billion settlement with Meta-owned Facebook and Instagram over allegations that inadequate safeguards exposed young users to deliberately addictive platform features.
In addition, US authorities issued fines totaling $3.69 billion for data-processing-related violations. Facebook accounted for $2.9 billion of that amount, followed by TikTok ($593 million), X ($150 million), Instagram ($68.5 million), YouTube ($36 million), and Snapchat ($35 million). TikTok also received a separate $100 million penalty in 2026 for insufficient security safeguards.
European authorities have imposed $5.16 billion in GDPR-related fines on social media platforms, with Ireland accounting for the largest share at $4.87 billion, or 94% of the total. France followed with $245 million, ahead of the UK ($36 million), Spain ($11.6 million), and the Netherlands ($870,000).
Europe’s two largest fines issued to social media platforms resulted from international data-transfer violations. Facebook received a $1.39 billion penalty for transferring EU user data to the US, while TikTok was fined $615 million for transferring European user data to China.
Beyond data transfers, European authorities imposed $1.22 billion in data-processing fines on TikTok ($401 million), LinkedIn ($360 million), Facebook ($244 million), Instagram ($209 million), and YouTube ($11.6 million). Data-breach-related penalties reached $1.09 billion, including $618 million for Facebook, $470 million for Instagram, and $522,000 for X.
EU authorities imposed an additional $594 million in fines for insufficient security, with Facebook accounting for $452 million, followed by Instagram ($106 million), Reddit ($19.3 million), and TikTok ($16.8 million). Cookie-consent violations resulted in $243.6 million in penalties for YouTube ($174 million) and Facebook ($69.6 million), while Discord was fined $928,000 for failing to comply with data-retention requirements.
Among the other analyzed markets, South Korea imposed $62.4 million in data-processing fines on social media platforms, including $43.5 million on Facebook, $11.8 million on Instagram, and $7 million on TikTok.
Meanwhile, Australian authorities fined Facebook nearly $50 million for data-processing violations and imposed a $463,000 penalty on X for insufficient security.
METHODOLOGY
Surfshark examined privacy-related fines and settlements for 10 of the world’s most popular social media platforms, reported in Europe, the US, Australia, and South Korea from 2020 onward. Penalties were grouped by platform, country, and violation type, with a minimum threshold of €200,000 in Europe and $200,000 elsewhere, and converted to US dollars at $1 = €0.87.
Data came from the GDPR Enforcement Tracker, Violation Tracker, Violation Tracker Global, and Osano’s Data Privacy Enforcement Tracker, supplemented by regulatory announcements, court records, and news reports.
Related
This entry was posted on October 20, 2026 at 9:22 am and is filed under Commentary with tags Surfshark. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Guest Post: Top social media platforms fined $26 billion over privacy violations
New Surfshark research finds that 10 of the world’s most popular social media platforms have faced more than $26 billion in privacy-related fines and settlements since 2020 across Europe, the US, Australia, and South Korea.
“These fines and settlements highlight the consequences social media companies can face over how they handle personal data. Some cases have already led to concrete changes, such as making tracking cookies easier to reject. But a bigger penalty does not automatically mean users are better protected, and if platforms treat it as a cost of doing business, the impact may be limited.
The real test is whether these cases drive changes that are implemented and sustained: more responsible data collection, greater transparency, and stronger safeguards, especially for children. The size of the penalty matters, but what it changes for users matters more,” says Dr. Luís Costa, Research Lead at Surfshark.
Since 2020, 10 of the world’s most popular social media platforms have faced more than $26 billion in privacy-related fines and settlements across Europe, the US, Australia, and South Korea.
Meta-owned platforms accounted for 91% ($23.7 billion) of the total, with Facebook alone responsible for $14.3 billion and Instagram for $9.4 billion. TikTok ranked a distant third at $1.6 billion.
Mid-tier totals included LinkedIn ($360 million), YouTube ($222 million), and X ($151 million), while Snapchat ($35 million) and Reddit ($19 million) recorded smaller amounts. Discord registered only $0.9 million, while Pinterest was the only platform with no qualifying fines or settlements identified in the research.
The US imposed the most privacy-related fines
The US imposed a total of $20.9 billion in fines on social media platforms, accounting for 80% of total global fines. The US also issued the largest single penalty in the research, a $17.1 billion settlement with Meta-owned Facebook and Instagram over allegations that inadequate safeguards exposed young users to deliberately addictive platform features.
In addition, US authorities issued fines totaling $3.69 billion for data-processing-related violations. Facebook accounted for $2.9 billion of that amount, followed by TikTok ($593 million), X ($150 million), Instagram ($68.5 million), YouTube ($36 million), and Snapchat ($35 million). TikTok also received a separate $100 million penalty in 2026 for insufficient security safeguards.
European authorities have imposed $5.16 billion in GDPR-related fines on social media platforms, with Ireland accounting for the largest share at $4.87 billion, or 94% of the total. France followed with $245 million, ahead of the UK ($36 million), Spain ($11.6 million), and the Netherlands ($870,000).
Europe’s two largest fines issued to social media platforms resulted from international data-transfer violations. Facebook received a $1.39 billion penalty for transferring EU user data to the US, while TikTok was fined $615 million for transferring European user data to China.
Beyond data transfers, European authorities imposed $1.22 billion in data-processing fines on TikTok ($401 million), LinkedIn ($360 million), Facebook ($244 million), Instagram ($209 million), and YouTube ($11.6 million). Data-breach-related penalties reached $1.09 billion, including $618 million for Facebook, $470 million for Instagram, and $522,000 for X.
EU authorities imposed an additional $594 million in fines for insufficient security, with Facebook accounting for $452 million, followed by Instagram ($106 million), Reddit ($19.3 million), and TikTok ($16.8 million). Cookie-consent violations resulted in $243.6 million in penalties for YouTube ($174 million) and Facebook ($69.6 million), while Discord was fined $928,000 for failing to comply with data-retention requirements.
Among the other analyzed markets, South Korea imposed $62.4 million in data-processing fines on social media platforms, including $43.5 million on Facebook, $11.8 million on Instagram, and $7 million on TikTok.
Meanwhile, Australian authorities fined Facebook nearly $50 million for data-processing violations and imposed a $463,000 penalty on X for insufficient security.
METHODOLOGY
Surfshark examined privacy-related fines and settlements for 10 of the world’s most popular social media platforms, reported in Europe, the US, Australia, and South Korea from 2020 onward. Penalties were grouped by platform, country, and violation type, with a minimum threshold of €200,000 in Europe and $200,000 elsewhere, and converted to US dollars at $1 = €0.87.
Data came from the GDPR Enforcement Tracker, Violation Tracker, Violation Tracker Global, and Osano’s Data Privacy Enforcement Tracker, supplemented by regulatory announcements, court records, and news reports.
Share this:
Like this:
Related
This entry was posted on October 20, 2026 at 9:22 am and is filed under Commentary with tags Surfshark. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.