GDPR enforcement in 2024
322 decisions · €148.0M total fines · ← 2023 · 2025 →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2024-04-22 | CROATIA DPA: Insufficient fulfilment of information obligations Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27Art. 13 | — |
| 2024-04-19 | CONSULTORÍA PERITACIONES ALMERIENSES, S.L Insufficient cooperation with supervisory authority | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 58 | €1,000 |
| 2024-04-15 | Avast Software s.r.o. Unknown | 🇪🇺 Czech Data Protection Auhtority (UOOU) | €13,900,000 | |
| 2024-04-15 | Private individual Insufficient cooperation with supervisory authority | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 58 | €400 |
| 2024-04-12 | CAIXABANK, S.A Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €1,200,000 |
| 2024-04-12 | PRESTAMER, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €1,800 |
| 2024-04-12 | DELSA ALQUILERES S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €1,000 |
| 2024-04-12 | Website operator Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €600 |
| 2024-04-12 | Private individual Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €300 |
| 2024-04-11 | Olimpia S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 24Art. 25 | €100,000 |
| 2024-04-11 | Facile.Energy S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 24Art. 25 | €100,000 |
| 2024-04-11 | Innova Camara Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5 | €25,000 |
| 2024-04-11 | Istituto Nazionale di Previdenza Sociale Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €20,000 |
| 2024-04-11 | Libero Consorzio comunale di Enna Insufficient involvement of data protection officer | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 37Art. 38 | €6,000 |
| 2024-04-11 | Store owner Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €1,000 |
| 2024-04-05 | VODAFONE ESPAÑA, S.A.U. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €112,000 |
| 2024-04-04 | HUBSIDE.STORE Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 14 | €525,000 |
| 2024-04-02 | Greek Ministry of Immigration and Asylum Insufficient technical and organisational measures to ensure information security | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 25Art. 31Art. 35 | €175,000 |
| 2024-03-25 | 20 MINUTOS EDITORA, S.L. Insufficient cooperation with supervisory authority | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 58 | €27,000 |
| 2024-03-25 | Restaurant owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,400 |
| 2024-03-24 | Stjörnuna ehf Non-compliance with general data processing principles | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 12Art. 13 | €10,000 |
| 2024-03-21 | Azienda sanitaria locale Roma 3 Insufficient fulfilment of data breach notification obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 33 | €10,000 |
| 2024-03-21 | HIPERBAZAR YONGFA 2018 SL Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €5,000 |
| 2024-03-21 | JUNTA DE CONSERVACION SECTOR RESIDENCIAL ELORDIGAN SAT Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €500 |
| 2024-03-20 | CLÍNICA PARÍS, S.L. Insufficient cooperation with supervisory authority | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 58 | €1,000 |