Article 12 GDPR — enforcement

Cited in 425 decisions · €1.2B total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-09-11	Comune di Nichelino Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 16	€18,000
2025-09-11	Comune di Nichelino Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 16	€18,000
2025-09-11	Giada FM S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€1,000
2025-09-11	Giada FM S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€1,000
2025-08-05	Order of Biochemists, Biologists and Chemists in the Romanian Health System Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€1,000
2025-08-05	Order of Biochemists, Biologists and Chemists in the Romanian Health System Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€1,000
2025-07-16	Georgescu Călin Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€4,000
2025-07-16	Georgescu Călin Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€4,000
2025-07-10	Banco Bilbao Vizcaya Argentaria SA Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15	€100,000
2025-07-10	Nursery School “La Combricola Dei Birichini Di Betty” Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€10,000
2025-07-10	Nursery School “La Combricola Dei Birichini Di Betty” Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€10,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-24	Shield of David - K.I.D.A.F. Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€10,000
2025-06-24	Shield of David - K.I.D.A.F. Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€10,000
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-06-04	Noi Compriamo Auto.it S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 24	€45,000
2025-06-04	Noi Compriamo Auto.it S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 24	€45,000

← previous 76–100 of 425 next →