Skip to content

Article 13 GDPR — enforcement

Cited in 621 decisions · €2.9B total fines · median €4,545 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2023-07-07 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €5,000
2023-07-06 Ristorante Francesco srl
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114 €5,000
2023-06-30 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-06-22 Autostrade per l'Italia spa
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 28 €1,000,000
2023-06-16 SPAIN DPA: Insufficient fulfilment of information obligations
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €2,000
2023-06-08 KG COM
Non-compliance with general data processing principles
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 6Art. 9Art. 12 €150,000
2023-06-01 Ew Business Machines S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 13Art. 114 €20,000
2023-06-01 Thin Srl
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 13 €15,000
2023-05-31 Website operator
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €500
2023-05-29 CARROZADOS TECAI, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €180
2023-05-25 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €480
2023-05-18 Sports betting operator
Insufficient legal basis for data processing
🇪🇺 Croatian Data Protection Authority (azop) Art. 6Art. 13Art. 25Art. 32 €380,000
2023-05-17 Website operator
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €60,000
2023-05-04 Debt collection agency
Insufficient technical and organisational measures to ensure information security
🇪🇺 Croatian Data Protection Authority (azop) Art. 6Art. 13Art. 28Art. 32 €2,265,000
2023-04-28 INFINITY ECOM S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €5,000
2023-04-27 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2023-04-26 Website operator
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2023-04-20 KFC RESTAURANTS SPAIN, S.L.
Insufficient involvement of data protection officer
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 37 €25,000
2023-04-13 TIM S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €7,631,175
2023-04-13 Mas s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €500,000
2023-04-13 Mas s.r.l.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €200,000
2023-04-05 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2023-04-04 TikTok
Non-compliance with general data processing principles
🇪🇺 Information Commissioner (ICO) Art. 5Art. 12Art. 13 €14,500,000
2023-04-04 Company
Insufficient fulfilment of information obligations
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 12Art. 13 €13,300
2023-04-03 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300