Article 12 GDPR — enforcement
Cited in 457 decisions · €1.3B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-01-13 | Medicina & Lavoro s.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €4,000 |
| 2022-01-05 | Εγνατία Οδός Α.Ε. Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12 | €1,000 |
| 2022-01-01 | Physician Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 12Art. 13 | €1,600 |
| 2022-01-01 | Website operator Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 12Art. 31 | €1,300 |
| 2022-01-01 | Company Insufficient fulfilment of information obligations | 🇪🇺 Data Protection Authority of Bremen | Art. 12Art. 13 | — |
| 2022-01-01 | Company Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Bremen | Art. 12 | — |
| 2022-01-01 | Physician Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Bremen | Art. 12 | — |
| 2021-12-28 | FREE MOBILE Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 15Art. 21Art. 25 | €300,000 |
| 2021-12-26 | Medical clinic Insufficient fulfilment of information obligations | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 12Art. 13Art. 15 | €5,000 |
| 2021-12-16 | FCA Italy s.p.a. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12 | €20,000 |
| 2021-12-16 | Enel Energia S.p.A Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €0 |
| 2021-12-09 | Limerick City and County Council Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Ireland | Art. 13Art. 12Art. 15 | €110,000 |
| 2021-12-08 | BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 12Art. 14Art. 15Art. 17 | €10,000 |
| 2021-11-25 | B&T S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €400,000 |
| 2021-11-25 | Aimon Srl Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 21 | €200,000 |
| 2021-11-19 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 12 | €800 |
| 2021-11-01 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 12 | €1,000 |
| 2021-10-27 | Car importer Insufficient legal basis for data processing | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 6Art. 12Art. 13 | €13,500 |
| 2021-10-14 | ΚΑΠΑ ΛΑΜΔΑ ΩΜΕΓΑ ΔΙΑΦΗΜΙΣΤΙΚΗ ΕΜΠΟΡΙΚΗ ΜΟΝΟΠΡΟΣΩΠΗ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 6Art. 12Art. 21 | €20,000 |
| 2021-10-06 | Facebook Ireland Limited Insufficient fulfilment of information obligations | 🇪🇺 Data Protection Authority of Ireland | Art. 5Art. 12Art. 13 | — |
| 2021-09-28 | Austrian Post Insufficient fulfilment of data subjects rights | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 12 | €9,500,000 |
| 2021-09-28 | Address Broker Insufficient fulfilment of data subjects rights | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 12 | €500,000 |
| 2021-09-24 | Vattenfall Europe Sales GmbH Insufficient data processing agreement | 🇪🇺 Data Protection Authority of Hamburg | Art. 12Art. 13 | €900,000 |
| 2021-09-16 | Sky Italia S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €3,296,326 |
| 2021-09-16 | Ciechi Ardizzone Gioeni di Catania Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 35 | €5,000 |