Article 12 GDPR — enforcement

Cited in 452 decisions · €1.2B total fines · median €11,500 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-10-23	Comune di Curtarolo Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2025-10-23	Comune di Curtarolo Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2025-10-22	Agency for Control of Outstanding Debts S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€2,000
2025-10-22	Agency for Control of Outstanding Debts S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€2,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-09	Municipality of Moschato–Tavros Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 25	€10,000
2025-10-09	Municipality of Moschato–Tavros Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 25	€10,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	Comune di Pazzano Insufficient cooperation with supervisory authority	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 13 Art. 58	€3,960
2025-09-25	Comune di Pazzano Insufficient cooperation with supervisory authority	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 13 Art. 58	€3,960
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-09-11	Comune di Nichelino Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 16	€18,000

← previous 76–100 of 452 next →