Article 12 GDPR — enforcement

Cited in 425 decisions · €1.2B total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2021-01-01	Real estate agent Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 6 Art. 12	—
2020-12-23	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 14 Art. 12 Art. 15 Art. 5	€50,000
2020-12-23	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 14 Art. 12 Art. 6 Art. 5	€15,000
2020-12-17	Ordine degli Assistenti Sociali della Regione Lazio Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12	€2,000
2020-12-16	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€97,150
2020-12-10	Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€22,200
2020-11-23	Vodafone România SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17	€4,000
2020-11-19	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 12	€4,800
2020-11-18	Carrefour France Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 15	€2,250,000
2020-11-17	Comune di Collegno Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 13 Art. 14	€2,000
2020-11-13	BELGIUM DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€1,500
2020-10-29	Gaypa s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13	€20,000
2020-10-29	American College of Greece Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 12	€1,000
2020-10-23	Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18 Art. 25	€54,800
2020-10-14	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 12	€12,030
2020-09-30	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 14	€20,050
2020-09-22	Iweb Internet Learning, S.L. Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7 Art. 12 Art. 13	€7,800
2020-09-01	Apartment building owners association Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€500
2020-08-28	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 12	€2,000
2020-08-06	GROW BEATS SL Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 12 Art. 13 Art. 14	€3,000
2020-08-06	GTL S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 15	€3,000
2020-08-05	Restaurant Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 12 Art. 13	€3,000
2020-08-04	Mapei S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2020-07-23	Employer Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 17	€1,700
2020-07-20	Comercial Vigobrandy, SL Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 12 Art. 13 Art. 14	€1,500

← previous 376–400 of 425 next →