GDPR enforcement in 2020

414 decisions · €172.0M total fines · ← 2019 · 2021 →

Date ↓	Company / party	Authority	Articles	Fine
2020-10-09	Caja Rural San José de Nules S. Cooperativa de Crédito Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€5,000
2020-10-09	Private Person Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€2,000
2020-10-09	Café Restaurante B.B.B Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€900
2020-10-06	Lycamobile Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-10-06	Callesgarcia, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€4,000
2020-10-03	Avata Hispania, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 28	€3,000
2020-10-01	H&M Hennes & Mauritz Online Shop A.B. & Co. KG Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hamburg	Art. 5 Art. 6	€35,258,708
2020-10-01	Megareduceri TV S.R.L. Insufficient cooperation with supervisory authority	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 31 Art. 58	€3,000
2020-10-01	Asociația de proprietari Militari R Insufficient cooperation with supervisory authority	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 31 Art. 58	€2,000
2020-09-30	Azienda Ospedaliera di Rilievo Nazionale 'Antonio Cardarelli' (Private Hospital) Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 28	€80,000
2020-09-30	Scanshare s.r.l. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 32	€60,000
2020-09-30	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 14	€20,050
2020-09-30	Venu Sanz Chef, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€3,000
2020-09-25	Xfera Moviles S.A. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-09-25	Odin Flissenter AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6	€13,900
2020-09-25	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 13 Art. 28 Art. 30	€400
2020-09-25	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 15	€400
2020-09-22	GLP Instalaciones 86, SL Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-09-22	Iweb Internet Learning, S.L. Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7 Art. 12 Art. 13	€7,800
2020-09-17	Vodafone España, SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-09-17	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 15 Art. 17	€3,200
2020-09-17	Grupo Carolizan Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€3,000
2020-09-16	Property owners community Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€10,000
2020-09-11	Private Person Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5	€8,000
2020-09-11	Political Party Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€1,500

← previous 126–150 of 414 next →