Article 12 GDPR — enforcement

Cited in 497 decisions · €1.7B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-07-17	AEPD (Spain) - EXP202103746	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 12 Art. 15	—
2026-07-14	Garante fines Lusha Systems Inc. over unauthorized B2B contact database	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 32 Art. 51	€2,000,000
2026-07-14	Municipality of Rieti Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 24 Art. 25	€6,000
2026-07-09	ANSPDCP (Romania) - Fine against Ascendex Technology SRL	🇷🇴 ANSPDCP (Romania)	Art. 423 Art. 4 Art. 121 Art. 12	€57,839
2026-07-03	Garante per la protezione dei dati personali (Italy) - 483/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 13 Art. 14	€5,800,000
2026-07-03	Hera Comm S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€5,800,000
2026-07-03	EstEnergy S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€1,400,000
2026-07-03	Cerved Group S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€400,000
2026-07-03	Garante per la protezione dei dati personali (Italy) - 487/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 52 Art. 5	€158,000
2026-07-03	Character Technologies Inc. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€158,000
2026-07-03	Experian Italia S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 25	€120,000
2026-07-01	Ascendex Technology SRL Insufficient fulfilment of data subjects rights	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€11,000
2026-06-18	Garante per la protezione dei dati personali (Italy) - 476/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 123 Art. 12 Art. 17 Art. 6	€460,000
2026-06-18	Acquirente Unico S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 16 Art. 28	€90,000
2026-06-18	Enna Provincial Health Authority Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€20,000
2026-06-18	Garante per la protezione dei dati personali (Italy) - 457/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 61	€5,000
2026-06-18	Edizioni Grandangolo di Giuseppe Castaldo Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 24	€2,075
2026-06-12	Market-In Non-compliance with general data processing principles	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€95,000
2026-06-12	MEDE S.A. Non-compliance with general data processing principles	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€65,000
2026-06-11	Green Partner S.r.l.s. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-06-08	Municipality of Vasto Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 35	€5,000
2026-06-05	ZeniΘ (Thessaloniki-Thessalia Gas Supply Company S.A.) Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 15 Art. 28	€100,000
2026-06-01	Elkjøp AS Insufficient legal basis for data processing	🇳🇴 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12	€1,820,000
2026-05-29	IndaNext Hungary Kft. (legal successor of Blikk Kft.) Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 9 Art. 12	€70,518
2026-05-29	Blikk Kft. Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 9 Art. 12	€70,300

← previous 26–50 of 497 next →