Article 10 GDPR — enforcement

Cited in 13 decisions · €2.3M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (8)

Read Article 10 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-03-12	INPS – Istituto nazionale previdenza sociale Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 10	€40,000
2026-02-26	Conservatory Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10	€5,000
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2025-10-23	Ordine degli Avvocati di Latina Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10	€15,000
2025-10-23	Ordine degli Avvocati di Latina Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10	€15,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2023-09-18	SAF LOGISTICS Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 9 Art. 10 Art. 31	€200,000
2023-04-27	Università degli studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 2	€4,000
2022-10-20	Italian Archery Federation (FITARCO) Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 2	€10,000
2022-04-28	Italian Ministry of Defense Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2022-03-10	Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 2	€8,000
2022-02-11	Amazon Road Transport Spain S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 10	€2,000,000