Skip to content

Article 13 GDPR — enforcement

Cited in 621 decisions · €2.9B total fines · median €4,545 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2023-01-16 DPC (Ireland) - 05/SIU/2018 🇮🇪 DPC (Ireland) Art. 2Art. 5Art. 6Art. 13 €50,000
2023-01-16 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-01-10 Homeowners Association
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €120
2023-01-09 Praktiškas UAB
Insufficient legal basis for data processing
🇪🇺 Lithuanian Data Protection Authority (VDAI) Art. 5Art. 9Art. 13Art. 30 €6,000
2023-01-01 MALTA DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Data Protection Commissioner of Malta Art. 5Art. 12Art. 13Art. 14 €2,500
2022-12-28 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-12-28 Homeowners Association
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €600
2022-12-28 MAE WEST SYSTEMS, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €400
2022-12-28 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2022-12-28 Homeowners Association
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €300
2022-12-21 Hotel
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12Art. 13 €8,000
2022-12-13 Company
Insufficient fulfilment of information obligations
🇪🇺 National Commission for Data Protection (CNPD) Art. 12Art. 13 €2,100
2022-12-13 Company
Insufficient fulfilment of information obligations
🇪🇺 National Commission for Data Protection (CNPD) Art. 12Art. 13 €1,400
2022-12-13 Company
Insufficient fulfilment of information obligations
🇪🇺 National Commission for Data Protection (CNPD) Art. 12Art. 13 €700
2022-12-09 Viking Line Oy Abp
Non-compliance with general data processing principles
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 12Art. 13Art. 15 €230,000
2022-12-09 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €480
2022-12-09 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €120
2022-12-02 Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 9Art. 13 €3,600
2022-12-01 Store owner (Joy Unique Collection)
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114 €6,000
2022-12-01 Store owner (Woolen)
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114 €3,000
2022-12-01 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2022-11-29 Company
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €3,000
2022-11-24 ÉLECTRICITÉ DE FRANCE
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 7Art. 12Art. 13Art. 14 €600,000
2022-11-24 STS Di Prisinzano s.r.l
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €1,000
2022-11-11 XASTRE DO PETO, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 21 €3,600