Article 12 GDPR — enforcement

Cited in 499 decisions · €1.7B total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-05-29	Blikk Kft. Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 9 Art. 12	€70,300
2026-05-28	Garante per la protezione dei dati personali (Italy) - 419/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 52	€55,000
2026-05-28	Action Fit di Milano Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 21	€3,930
2026-05-14	Emirates Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13	€180,000
2026-05-14	Energia Sostenibile S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2026-05-14	Lidl Italia S.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 18	€43,000
2026-05-12	NAIH (Hungary) - NAIH-450-7-2026	🇭🇺 NAIH (Hungary)	Art. 51 Art. 5 Art. 121 Art. 12	€15,000,000
2026-05-12	Technology Company Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€177,000
2026-05-12	Isabel SA Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 15	€120,000
2026-05-12	Société Wallonne des Eaux Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 28	€86,000
2026-05-12	Operator of an online marketplace Insufficient fulfilment of information obligations	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 12 Art. 13	€42,052
2026-05-08	Law Firm Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€4,920
2026-05-06	APD/GBA (Belgium) - 97/2026	🇧🇪 APD/GBA (Belgium)	Art. 122 Art. 12 Art. 123 Art. 124	—
2026-04-30	NAIH (Hungary) - NAIH-4462-5-2026	🇭🇺 NAIH (Hungary)	Art. 51 Art. 5 Art. 52 Art. 121	€10,000,000
2026-04-30	Operator of an online shop for alcoholic beverages Insufficient fulfilment of information obligations	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 12 Art. 13	€27,319
2026-04-29	Pianeta S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€34,000
2026-04-23	Accountancy Firm Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 17	€8,500
2026-04-17	Framos Italia s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€5,000
2026-04-16	AKI (Estonia) - No. 2.1-1/24/397-890-38	🇪🇪 AKI (Estonia)	Art. 47 Art. 4 Art. 411 Art. 51	—
2026-03-26	Esselunga S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15	€5,000
2026-03-20	Public and Private Domain SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-03-20	Domeniul Public și Privat SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-03-13	CENTRO MEDICO REY FERNANDO, S.L.P. Insufficient fulfilment of data subjects rights	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 12	€600
2026-03-12	ITAS Mutua Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€50,000
2026-03-07	Italian DPA finds Cerved Group failed to disclose creditworthiness scores in Art. 15	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 12 Art. 15	€400,000

← previous 51–75 of 499 next →