Article 12 GDPR — enforcement
Cited in 425 decisions · €1.2B total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-08-02 | Unser Ö-Bonus Club GmbH Insufficient legal basis for data processing | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 6Art. 7Art. 12 | €500,000 |
| 2021-07-26 | Mercadona S.A. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 9Art. 12 | €2,520,000 |
| 2021-07-22 | Roma Capitale Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 25 | €800,000 |
| 2021-07-08 | Pediatrician Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15 | €5,000 |
| 2021-06-24 | Magazine publisher Insufficient legal basis for data processing | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 7Art. 12Art. 21 | €8,500 |
| 2021-06-18 | Magyar Telekom Nyrt. Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 6Art. 12Art. 17 | €28,400 |
| 2021-06-15 | Huppuís ehf Non-compliance with general data processing principles | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 12Art. 13 | €34,000 |
| 2021-06-07 | Radiotelevisión del principado de Asturias Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 12 | €19,600 |
| 2021-05-21 | Homeowners Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 12 | €3,000 |
| 2021-05-17 | Municipal Organization for Pre-School Education and Social Solidarity (DOPAKA) of the municipality of Tavros Moschato Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 6Art. 12Art. 17 | €10,000 |
| 2021-05-14 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 12 | €800 |
| 2021-05-12 | A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 12Art. 15Art. 17 | €5,000 |
| 2021-05-05 | Disqus Inc. Insufficient legal basis for data processing | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 6Art. 12Art. 13 | — |
| 2021-04-21 | ParkkiPate Oy Insufficient fulfilment of data subjects rights | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 12Art. 14Art. 15 | €75,000 |
| 2021-04-15 | Istituto Nazionale Previdenza Sociale (INPS) Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 15 | €12,000 |
| 2021-04-09 | TikTok Insufficient fulfilment of information obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12 | €750,000 |
| 2021-03-25 | Fastweb S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €4,500,000 |
| 2021-03-25 | GEDI News Network Spa Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12 | €20,000 |
| 2021-03-25 | TECNOMEDICAL S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €7,000 |
| 2021-03-11 | Planet Group Spa Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 21Art. 12 | €80,000 |
| 2021-03-10 | Self Employed Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 5Art. 6Art. 12Art. 13 | €200 |
| 2021-03-03 | Cypriot Real Estate Registration Authority Insufficient fulfilment of information obligations | 🇪🇺 Cypriot Data Protection Commissioner | Art. 12Art. 15Art. 31Art. 58 | €10,000 |
| 2021-01-14 | Poliambulatorio Talenti S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €2,000 |
| 2021-01-12 | BELGIUM DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 6Art. 12Art. 21 | €10,000 |
| 2021-01-05 | Nestor SAS Insufficient fulfilment of information obligations | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 13 | €20,000 |