Article 12 GDPR — enforcement

Cited in 425 decisions · €1.2B total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-07-20	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 12	€400
2020-07-16	Google Ireland Ltd. Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15	€28
2020-07-14	Google Belgium SA Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 12	€600,000
2020-07-13	Wind Tre S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 24	€16,700,000
2020-07-06	Bureau Krediet Registration ('BKR') Insufficient fulfilment of data subjects rights	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 12 Art. 15	€830,000
2020-07-02	Mapei S.p.A. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€15,000
2020-06-25	Department of Home Affairs Insufficient fulfilment of data subjects rights	🇪🇺 Information Commissioner of Isle of Man	Art. 12 Art. 15	€13,500
2020-05-22	Posti Group Oyj Insufficient fulfilment of data subjects rights	🇪🇺 Deputy Data Protection Ombudsman	Art. 12 Art. 13 Art. 14 Art. 15	€100,000
2020-03-04	Representative of a local government Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 15	€290
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Television broadcaster Insufficient fulfilment of information obligations	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 12	€3,850
2020-01-01	CZECH REPUBLIC DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 12 Art. 15	€1,900
2020-01-01	Corporation Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Authority of Hessen	Art. 12 Art. 15	—
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2020-01-01	Healthcare provider Insufficient fulfilment of information obligations	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 28	—
2019-12-17	Website providing legal information Insufficient fulfilment of information obligations	🇪🇺 Belgian Data Protection Authority (APD)	Art. 6 Art. 12 Art. 13	€15,000
2019-12-17	Nursing Care Organisation Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 12 Art. 15 Art. 17	€2,000
2019-11-22	BNP Paribas Personal Finance S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€2,000
2019-10-28	Employer Insufficient fulfilment of data subjects rights	🇪🇺 Commission for Personal Data Protection (KZLD)	Art. 12 Art. 15	€511
2019-10-17	UTTIS INDUSTRIES SRL Insufficient fulfilment of information obligations	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 5 Art. 6	€2,500
2019-10-04	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 30	€2,000
2019-09-03	Private enforcement agent Insufficient fulfilment of data subjects rights	🇪🇺 Commission for Personal Data Protection (KZLD)	Art. 12 Art. 15	€1,121
2019-06-13	Employer UNIONTRAD COMPANY Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 32	€20,000
2019-05-31	Local bank Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18	€2,000
2018-12-18	HUNGARY DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18 Art. 13	€3,200

← previous 401–425 of 425