Article 13 GDPR — enforcement
Cited in 597 decisions · €837.4M total fines · median €4,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-12-01 | Store owner Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €2,000 |
| 2022-11-29 | Company Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €3,000 |
| 2022-11-24 | ÉLECTRICITÉ DE FRANCE Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 7Art. 12Art. 13Art. 14 | €600,000 |
| 2022-11-24 | STS Di Prisinzano s.r.l Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €1,000 |
| 2022-11-11 | XASTRE DO PETO, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13Art. 21 | €3,600 |
| 2022-11-10 | DISCORD INC. Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 13Art. 25Art. 32 | €800,000 |
| 2022-11-10 | Vodafone Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €500,000 |
| 2022-11-10 | Sportitalia Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 13Art. 30 | €20,000 |
| 2022-11-10 | Poliambulatorio Radiologico 'il Sorriso' S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 37 | €15,000 |
| 2022-11-03 | Burwebs S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 12Art. 13Art. 25 | €75,000 |
| 2022-11-02 | Portuguese National Statistical Institute Non-compliance with general data processing principles | 🇪🇺 Portuguese Data Protection Authority (CNPD) | Art. 5Art. 9Art. 12Art. 13 | €4,300,000 |
| 2022-11-02 | Setúbal municipality Non-compliance with general data processing principles | 🇪🇺 Portuguese Data Protection Authority (CNPD) | Art. 5Art. 13Art. 37 | €180,000 |
| 2022-10-31 | TECHPUMP SOLUTIONS S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 8Art. 12 | €525,000 |
| 2022-10-26 | ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €10,000 |
| 2022-10-20 | Douglas Italia S.p.a. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €1,400,000 |
| 2022-10-20 | Comune di Salento Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €12,000 |
| 2022-10-17 | INMUR JOYEROS, S.L. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €180 |
| 2022-10-09 | Company Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €800 |
| 2022-10-06 | Alpha Exploration Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €2,000,000 |
| 2022-10-04 | Easylife Ltd. Insufficient legal basis for data processing | 🇪🇺 Information Commissioner (ICO) | Art. 5Art. 6Art. 9Art. 13 | €1,547,000 |
| 2022-10-04 | Homeowners Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 13 | €600 |
| 2022-10-03 | PIRAEUS BANK S.A. Insufficient fulfilment of information obligations | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 13 | €20,000 |
| 2022-10-03 | NATIONAL BANK OF GREECE S.A. Insufficient fulfilment of information obligations | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 13 | €20,000 |
| 2022-10-03 | EUROBANK ERGASIAS S.A. Insufficient fulfilment of information obligations | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 13 | €20,000 |
| 2022-10-03 | ALFA BANK S.A. Insufficient fulfilment of information obligations | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 13 | €20,000 |