Article 12 GDPR — enforcement

Cited in 425 decisions · €1.2B total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (155)

Read Article 12 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-21	Bucharest Down Town Hotel SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 15	€1,000
2025-03-20	ONE UNITED PROPERTIES S.A Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 12 Art. 15 Art. 17	€2,000
2025-03-13	Interflora Italia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 15	€40,000
2025-03-11	Noy Business Tranzactions SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17	€1,000
2025-02-27	Velvet Medical SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€1,000
2025-02-10	PPC Energie Muntenia SA Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-02-04	Real estate company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 12 Art. 13	€40,000
2025-01-27	Orange Romania SA Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-01-16	Realmaps S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-01-06	Credit Institution Insufficient fulfilment of data subjects rights	🇪🇺 National Commission for Data Protection (CNPD)	Art. 12	€175,000
2024-11-27	E.ON Energia spa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€892,783
2024-11-26	Netflix International B.V. Insufficient fulfilment of information obligations	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 12 Art. 13 Art. 15	€4,750,000
2024-11-13	Foodinho Srl Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€5,000,000
2024-11-04	Blackcab Systems SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15	€1,000
2024-11-02	OpenAI OpCo LLC Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000,000
2024-10-30	Untold SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17	€15,000

← previous 126–150 of 425 next →