Skip to content

Article 12 GDPR — enforcement

Cited in 497 decisions · €1.7B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Date ↓ Company / party Authority Articles Fine
2026-09-30 Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at 🇮🇸 Persónuvernd (Island) Art. 51Art. 5Art. 12Art. 13 —
2026-09-23 Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 12Art. 13Art. 15 €39,000
2026-09-21 Google Ireland Limited
Insufficient legal basis for data processing
🇮🇪 Data Protection Commission (DPC) Art. 5Art. 6Art. 12Art. 13 €403,000,000
2026-09-16 Garante fines BBVA Italy for ignoring in-app objection, violating Arts. 5, 12, 21 GDPR 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 12Art. 21 €5,508,000
2026-09-16 Italian DPA: pool locker surveillance lawful but retention must be 12/24 hours 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 61 €8,000
2026-09-16 Italian DPA: Municipality of Rieti breached GDPR by publishing 31,000 taxpayers' waste 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 51 €6,000
2026-09-16 Italian DPA sanctions Experian Italia for incomplete Art. 15 GDPR access responses on 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 12 €120
2026-09-15 APDCAT: Public body violated GDPR by disclosing audio recording to four extra recipients 🇪🇸 APDCAT (Catalonia) Art. 51Art. 5Art. 6Art. 12 €3,150
2026-09-15 AEPD: Data subject entitled to identity of professionals who accessed medical records 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 52Art. 12 —
2026-09-08 Garante warns ReLife Recycling for failing to timely respond to GDPR access request 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 123Art. 12Art. 124 —
2026-09-08 IP Slovenia: Controller breached Art. 15(1)(d) and 15(3) GDPR by denying storage info and 🇸🇮 IP (Slovenia) Art. 12Art. 151Art. 15Art. 153 —
2026-09-03 Banco Bilbao Vizcaya Argentaria S.A.
Insufficient fulfilment of data subjects rights
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 21Art. 24 €5,508,000
2026-09-03 Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento
Insufficient legal basis for data processing
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €8,000
2026-08-25 Datatilsynet reprimands Danish Tax Administration for access request delays (2019-2024) 🇩🇰 Datatilsynet (Denmark) Art. 123Art. 12Art. 15 —
2026-08-20 Garante per la protezione dei dati personali (Italy) - 10269624 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 61Art. 6Art. 7Art. 123 €280,000
2026-08-19 Garante per la protezione dei dati personali (Italy) - 10266250 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 5Art. 6Art. 7Art. 12 €15,300
2026-08-18 ANSPDCP (Romania) - AMATO BESTSELLER S.R.L. 🇷🇴 ANSPDCP (Romania) Art. 51Art. 5Art. 9Art. 324 €285,395
2026-08-18 Datatilsynet (Denmark) - 2023-31-0321 🇩🇰 Datatilsynet (Denmark) Art. 122Art. 12Art. 123Art. 124 —
2026-08-06 Leontinoi Società Cooperativa Sociale
Insufficient fulfilment of data subjects rights
🇮🇹 Italian Data Protection Authority (Garante) Art. 12Art. 15Art. 31 €1,000
2026-07-24 HDPA (Greece) - 33/2020 🇬🇷 HDPA (Greece) Art. 47Art. 4Art. 5Art. 12 €2,000
2026-07-23 Garante per la protezione dei dati personali (Italy) - 556/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 52Art. 5Art. 24Art. 28 €9,516,000
2026-07-22 NAIH (Hungary) - NAIH-11443-3/2026 🇭🇺 NAIH (Hungary) Art. 121Art. 12Art. 131Art. 13 €2,000,000
2026-07-22 Finnish DPA: requesting address, ID number and strong authentication for access request 🇫🇮 Tietosuojavaltuutetun toimisto (Finland) Art. 51Art. 5Art. 122Art. 12 —
2026-07-21 CNIL fines EXTIA for failing to properly handle job applicant erasure requests 🇫🇷 CNIL (France) Art. 12Art. 17 €300,000
2026-07-17 CNIL (France) - SAN-2022-011 🇫🇷 CNIL (France) Art. 12Art. 14Art. 15Art. 21 €1,000,000