Skip to content

Article 13 GDPR — enforcement

Cited in 621 decisions · €2.9B total fines · median €4,545 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2023-09-14 GFB One s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 13Art. 157 €90,000
2023-09-14 Betting company
Insufficient legal basis for data processing
🇪🇺 Croatian Data Protection Authority (azop) Art. 6Art. 7Art. 13 €30,000
2023-09-14 Betting company
Insufficient legal basis for data processing
🇪🇺 Croatian Data Protection Authority (azop) Art. 6Art. 7Art. 13 €20,000
2023-09-14 Nimbus s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 13 €5,000
2023-09-13 Zagreb Holding d.o.o.
Insufficient fulfilment of information obligations
🇪🇺 Croatian Data Protection Authority (azop) Art. 13Art. 25 €25,000
2023-09-06 University of Iceland
Insufficient fulfilment of information obligations
🇪🇺 Icelandic data protection authority ('Persónuvernd') Art. 5Art. 12Art. 13 €10,300
2023-09-01 AZOP (Croatia) - Decision 14-09-2023 🇭🇷 AZOP (Croatia) Art. 61Art. 6Art. 7Art. 131 €2,000,030,000
2023-09-01 TikTok Limited
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Ireland Art. 5Art. 12Art. 13Art. 24 €345,000,000
2023-09-01 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-08-30 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €1,500
2023-08-23 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-08-16 MÁRMOLES Y GRANITOS MEJIAS, S. L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-08-16 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-08-11 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-08-08 ELECTRAWORKS - CEUTA, S.A.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €6,000
2023-08-01 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 13Art. 44 €3,570
2023-07-21 MADRID TOURISTIC CAPITAL, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €720
2023-07-20 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €1,000
2023-07-18 Tiscali Italia SpA
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 24 €100,000
2023-07-18 Università Telematica E-Campus
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €75,000
2023-07-18 Municipality of Modica
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 25 €45,000
2023-07-18 Compara Facile S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €40,000
2023-07-18 Prodav srl
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114 €1,000
2023-07-16 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-07-10 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300