Article 13 GDPR — enforcement

Cited in 650 decisions · €4.1B total fines · median €5,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Read Article 13 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-30	Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at	🇮🇸 Persónuvernd (Island)	Art. 51 Art. 5 Art. 12 Art. 13	—
2026-09-23	Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 12 Art. 13 Art. 15	€39,000
2026-09-21	Google Ireland Limited Insufficient legal basis for data processing	🇮🇪 Data Protection Commission (DPC)	Art. 5 Art. 6 Art. 12 Art. 13	€403,000,000
2026-09-16	Italian DPA: pool locker surveillance lawful but retention must be 12/24 hours	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 61	€8,000
2026-09-10	AEPD: CaixaBank requested excessive inheritance documentation from heirs	🇪🇸 AEPD (Spain)	Art. 13 Art. 25 Art. 30	€408,000
2026-09-10	Italian DPA sanctions Top Secret Investigazioni for unjustified email forwarding after	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€6,500
2026-09-03	Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2026-08-26	DSB: Retailer must grant full access and delete data after third-party fraud order	🇦🇹 DSB (Austria)	Art. 61 Art. 6 Art. 145 Art. 14	—
2026-08-21	Uber Technologies Inc. Non-compliance with general data processing principles	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 22 Art. 13 Art. 14	€824,990,000
2026-08-19	Garante per la protezione dei dati personali (Italy) - 10266250	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-07-23	Top Secrert Investigazioni e sicurezza s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€6,500
2026-07-22	NAIH (Hungary) - NAIH-11443-3/2026	🇭🇺 NAIH (Hungary)	Art. 121 Art. 12 Art. 131 Art. 13	€2,000,000
2026-07-16	Garante per la protezione dei dati personali (Italy) - 10128005	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€50,000
2026-07-14	La Terrazza Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€700
2026-07-03	Garante per la protezione dei dati personali (Italy) - 483/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 13 Art. 14	€5,800,000
2026-07-03	Hera Comm S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€5,800,000
2026-07-03	EstEnergy S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€1,400,000
2026-07-03	Garante per la protezione dei dati personali (Italy) - 484/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€1,400,000
2026-07-03	Character Technologies Inc. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€158,000
2026-07-03	Garante per la protezione dei dati personali (Italy) - 487/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 52 Art. 5	€158,000
2026-07-03	IMY (Sweden) - IMY-2024-2904	🇸🇪 IMY (Sweden)	Art. 13	—
2026-06-18	Cosmint S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€6,600
2026-06-18	Garante per la protezione dei dati personali (Italy) - 462/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 21 Art. 2 Art. 41 Art. 4	€6,600
2026-06-18	Garante per la protezione dei dati personali (Italy) - 457/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 61	€5,000
2026-06-18	Edizioni Grandangolo di Giuseppe Castaldo Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 24	€2,075

1–25 of 650 next →