GDPR enforcement in 2022
603 decisions · €519.9M total fines · ← 2021 · 2023 →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-12-08 | Jewelry manufacturer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Fish market Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,185 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-05 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,583 |
| 2022-12-05 | Betting place Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-03 | INDECEMI, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €3,000 |
| 2022-12-03 | LORENT 2013, S.L Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2022-12-03 | Homeowners Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €300 |
| 2022-12-02 | Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 9Art. 13 | €3,600 |
| 2022-12-02 | CASA 7 PERSONAL SHOPPER, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €3,500 |
| 2022-12-01 | Lazio Region Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 113Art. 114 | €100,000 |
| 2022-12-01 | Amazon Italia Logistica s.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €20,000 |
| 2022-12-01 | A.R.N.A.S. Civico Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €6,000 |
| 2022-12-01 | Store owner (Joy Unique Collection) Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 114 | €6,000 |
| 2022-12-01 | Store owner (Woolen) Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 114 | €3,000 |
| 2022-12-01 | Store owner Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €2,000 |
| 2022-11-30 | PIONIER (law firm) Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 6Art. 9 | €9,600 |
| 2022-11-29 | Company Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €3,000 |
| 2022-11-29 | Private individual Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €500 |
| 2022-11-25 | Association for the prevention and study of crimes, abuses and negligence in information technology and advanced communications (APEDANICA) Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €5,000 |
| 2022-11-25 | OTP LEASING ROMANIA IFN SA Insufficient technical and organisational measures to ensure information security | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 25Art. 32 | €3,000 |
| 2022-11-25 | Betting place Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-11-25 | Company in the hospitality industry Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |