Article 13 GDPR — enforcement
Cited in 651 decisions · €4.1B total fines · median €5,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-10-01 | Garante per la protezione dei dati personali (Italy) - 10297167 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 121Art. 12 | €10,000 |
| 2026-09-30 | Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at | 🇮🇸 Persónuvernd (Island) | Art. 51Art. 5Art. 12Art. 13 | — |
| 2026-09-23 | Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 12Art. 13Art. 15 | €39,000 |
| 2026-09-21 | Google Ireland Limited Insufficient legal basis for data processing | 🇮🇪 Data Protection Commission (DPC) | Art. 5Art. 6Art. 12Art. 13 | €403,000,000 |
| 2026-09-16 | Italian DPA: pool locker surveillance lawful but retention must be 12/24 hours | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 51Art. 61 | €8,000 |
| 2026-09-10 | AEPD: CaixaBank requested excessive inheritance documentation from heirs | 🇪🇸 AEPD (Spain) | Art. 13Art. 25Art. 30 | €408,000 |
| 2026-09-10 | Italian DPA sanctions Top Secret Investigazioni for unjustified email forwarding after | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 51Art. 51 | €6,500 |
| 2026-09-03 | Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento Insufficient legal basis for data processing | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €8,000 |
| 2026-08-26 | DSB: Retailer must grant full access and delete data after third-party fraud order | 🇦🇹 DSB (Austria) | Art. 61Art. 6Art. 145Art. 14 | — |
| 2026-08-21 | Uber Technologies Inc. Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 22Art. 13Art. 14 | €824,990,000 |
| 2026-08-19 | Garante per la protezione dei dati personali (Italy) - 10266250 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 5Art. 6Art. 7Art. 12 | €15,300 |
| 2026-07-23 | Top Secrert Investigazioni e sicurezza s.r.l. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €6,500 |
| 2026-07-22 | NAIH (Hungary) - NAIH-11443-3/2026 | 🇭🇺 NAIH (Hungary) | Art. 121Art. 12Art. 131Art. 13 | €2,000,000 |
| 2026-07-16 | Garante per la protezione dei dati personali (Italy) - 10128005 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 51Art. 51 | €50,000 |
| 2026-07-14 | La Terrazza Insufficient fulfilment of information obligations | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13 | €700 |
| 2026-07-03 | Garante per la protezione dei dati personali (Italy) - 483/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 13Art. 14 | €5,800,000 |
| 2026-07-03 | Hera Comm S.p.A. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 14 | €5,800,000 |
| 2026-07-03 | Garante per la protezione dei dati personali (Italy) - 484/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 51Art. 51 | €1,400,000 |
| 2026-07-03 | EstEnergy S.p.A. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 14 | €1,400,000 |
| 2026-07-03 | Character Technologies Inc. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 14 | €158,000 |
| 2026-07-03 | Garante per la protezione dei dati personali (Italy) - 487/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 32Art. 3Art. 52Art. 5 | €158,000 |
| 2026-07-03 | IMY (Sweden) - IMY-2024-2904 | 🇸🇪 IMY (Sweden) | Art. 13 | — |
| 2026-06-18 | Garante per la protezione dei dati personali (Italy) - 462/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 21Art. 2Art. 41Art. 4 | €6,600 |
| 2026-06-18 | Cosmint S.p.A. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13 | €6,600 |
| 2026-06-18 | Garante per la protezione dei dati personali (Italy) - 457/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 51Art. 5Art. 51Art. 61 | €5,000 |
1–25 of 651 next →