Article 12 GDPR — enforcement

Cited in 457 decisions · €1.3B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2021-03-11	Planet Group Spa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 21 Art. 12	€80,000
2021-03-10	Self Employed Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 13	€200
2021-03-03	Cypriot Real Estate Registration Authority Insufficient fulfilment of information obligations	🇪🇺 Cypriot Data Protection Commissioner	Art. 12 Art. 15 Art. 31 Art. 58	€10,000
2021-01-14	Poliambulatorio Talenti S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 15	€2,000
2021-01-12	BELGIUM DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 6 Art. 12 Art. 21	€10,000
2021-01-05	Nestor SAS Insufficient fulfilment of information obligations	🇪🇺 French Data Protection Authority (CNIL)	Art. 12 Art. 13	€20,000
2021-01-01	Real estate agent Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 6 Art. 12	—
2020-12-23	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 14 Art. 12 Art. 15 Art. 5	€50,000
2020-12-23	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 14 Art. 12 Art. 6 Art. 5	€15,000
2020-12-17	Ordine degli Assistenti Sociali della Regione Lazio Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12	€2,000
2020-12-16	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€97,150
2020-12-10	Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€22,200
2020-11-23	Vodafone România SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17	€4,000
2020-11-19	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 12	€4,800
2020-11-18	Carrefour France Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 15	€2,250,000
2020-11-17	Comune di Collegno Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 13 Art. 14	€2,000
2020-11-13	BELGIUM DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€1,500
2020-10-29	Gaypa s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13	€20,000
2020-10-29	American College of Greece Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 12	€1,000
2020-10-23	Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18 Art. 25	€54,800
2020-10-14	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 12	€12,030
2020-09-30	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 14	€20,050
2020-09-22	Iweb Internet Learning, S.L. Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7 Art. 12 Art. 13	€7,800
2020-09-01	Apartment building owners association Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€500
2020-08-28	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 12	€2,000

← previous 401–425 of 457 next →