Article 12 GDPR — enforcement

Cited in 457 decisions · €1.3B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Date ↓	Company / party	Authority	Articles	Fine
2019-10-28	Employer Insufficient fulfilment of data subjects rights	🇪🇺 Commission for Personal Data Protection (KZLD)	Art. 12 Art. 15	€511
2019-10-17	UTTIS INDUSTRIES SRL Insufficient fulfilment of information obligations	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 5 Art. 6	€2,500
2019-10-04	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 30	€2,000
2019-09-03	Private enforcement agent Insufficient fulfilment of data subjects rights	🇪🇺 Commission for Personal Data Protection (KZLD)	Art. 12 Art. 15	€1,121
2019-06-13	Employer UNIONTRAD COMPANY Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 32	€20,000
2019-05-31	Local bank Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18	€2,000
2018-12-18	HUNGARY DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 18 Art. 13	€3,200

← previous 451–457 of 457