The last twelve months have seen a number of sizeable fines being issued on both sides of the Atlantic for an increasing range of non‐compliance issues. This session will cover enforcement actions around the world, both regulatory and in the courts, concentrating on actions in the EU under GDPR. A panel of privacy and data security legal scholars will lead a dialogue on the most instructive cases from the past year.