Article 12 GDPR — enforcement

Cited in 499 decisions · €1.7B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-10-01	Garante per la protezione dei dati personali (Italy) - 10297167	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 121 Art. 12	€10,000
2026-09-30	Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at	🇮🇸 Persónuvernd (Island)	Art. 51 Art. 5 Art. 12 Art. 13	—
2026-09-23	Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 12 Art. 13 Art. 15	€39,000
2026-09-21	Google Ireland Limited Insufficient legal basis for data processing	🇮🇪 Data Protection Commission (DPC)	Art. 5 Art. 6 Art. 12 Art. 13	€403,000,000
2026-09-16	Garante fines BBVA Italy for ignoring in-app objection, violating Arts. 5, 12, 21 GDPR	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 12 Art. 21	€5,508,000
2026-09-16	Italian DPA: pool locker surveillance lawful but retention must be 12/24 hours	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 61	€8,000
2026-09-16	Italian DPA: Municipality of Rieti breached GDPR by publishing 31,000 taxpayers' waste	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€6,000
2026-09-16	Italian DPA sanctions Experian Italia for incomplete Art. 15 GDPR access responses on	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 12	€120
2026-09-15	APDCAT: Public body violated GDPR by disclosing audio recording to four extra recipients	🇪🇸 APDCAT (Catalonia)	Art. 51 Art. 5 Art. 6 Art. 12	€3,150
2026-09-15	AEPD: Data subject entitled to identity of professionals who accessed medical records	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 52 Art. 12	—
2026-09-08	Garante warns ReLife Recycling for failing to timely respond to GDPR access request	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 123 Art. 12 Art. 124	—
2026-09-08	IP Slovenia: Controller breached Art. 15(1)(d) and 15(3) GDPR by denying storage info and	🇸🇮 IP (Slovenia)	Art. 12 Art. 151 Art. 15 Art. 153	—
2026-09-03	Banco Bilbao Vizcaya Argentaria S.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 21 Art. 24	€5,508,000
2026-09-03	Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2026-08-25	Datatilsynet reprimands Danish Tax Administration for access request delays (2019-2024)	🇩🇰 Datatilsynet (Denmark)	Art. 123 Art. 12 Art. 15	—
2026-08-20	Garante per la protezione dei dati personali (Italy) - 10269624	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 61 Art. 6 Art. 7 Art. 123	€280,000
2026-08-19	Garante per la protezione dei dati personali (Italy) - 10266250	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-08-18	ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.	🇷🇴 ANSPDCP (Romania)	Art. 51 Art. 5 Art. 9 Art. 324	€285,395
2026-08-18	Datatilsynet (Denmark) - 2023-31-0321	🇩🇰 Datatilsynet (Denmark)	Art. 122 Art. 12 Art. 123 Art. 124	—
2026-08-06	Leontinoi Società Cooperativa Sociale Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15 Art. 31	€1,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-23	Garante per la protezione dei dati personali (Italy) - 556/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 52 Art. 5 Art. 24 Art. 28	€9,516,000
2026-07-22	NAIH (Hungary) - NAIH-11443-3/2026	🇭🇺 NAIH (Hungary)	Art. 121 Art. 12 Art. 131 Art. 13	€2,000,000
2026-07-22	Finnish DPA: requesting address, ID number and strong authentication for access request	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 51 Art. 5 Art. 122 Art. 12	—
2026-07-21	CNIL fines EXTIA for failing to properly handle job applicant erasure requests	🇫🇷 CNIL (France)	Art. 12 Art. 17	€300,000

1–25 of 499 next →