Skip to content

GDPR enforcement in 2023

565 decisions · €2.5B total fines · ← 2022 · 2024 →

Date ↓ Company / party Authority Articles Fine
2023-08-30 GENERAL LOGISTICS SYSTEMS SPAIN, S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €140,000
2023-08-30 POLAND DPA: Insufficient cooperation with supervisory authority
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 58 €13,000
2023-08-30 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €1,500
2023-08-30 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €300
2023-08-30 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €300
2023-08-30 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €180
2023-08-29 ALBEN AIRPORT FACILITIES S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €1,500
2023-08-28 Trygg-Hansa
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Sweden Art. 5Art. 32 €3,000,000
2023-08-28 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €10,000
2023-08-28 WALL BOX CHARGERS S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €4,800
2023-08-28 MULTIGAS ASESORES S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €500
2023-08-25 Homeowners' association
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €1,500
2023-08-23 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €300
2023-08-23 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-08-22 DPC (Ireland) - 06/SIU/2018 🇮🇪 DPC (Ireland) Art. 51Art. 5Art. 24Art. 351
2023-08-21 Uipath SRL
Insufficient technical and organisational measures to ensure information security
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 25Art. 32 €70,000
2023-08-18 JOLY DIGITAL, S.L.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €20,000
2023-08-16 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €5,000
2023-08-16 MÁRMOLES Y GRANITOS MEJIAS, S. L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-08-16 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-08-11 ADENET SYSTEMS, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2023-08-11 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-08-11 RING RING CLIN S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €500
2023-08-08 ODRIA COSTAS INTERNACIONAL, S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €6,000
2023-08-08 ELECTRAWORKS - CEUTA, S.A.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €6,000