Skip to content

Article 13 GDPR — enforcement

Cited in 621 decisions · €2.9B total fines · median €4,545 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2022-09-15 Immobiliare Riscostruzione Meloria s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2022-09-12 Coin dealer
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 7Art. 12 €80,700
2022-09-09 School
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 12Art. 13 €15,000
2022-09-09 EURO DONER KEBAB
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €180
2022-09-09 HDPA (Greece) - 50/2022 🇬🇷 HDPA (Greece) Art. 51Art. 5Art. 51Art. 52 €15
2022-09-04 Store owner
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €360
2022-09-01 MH VILASECA S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €240
2022-08-30 COLEGIO VILLAEUROPA, S.C.L
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €3,000
2022-08-30 Bazar Pekin
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 30 €1,700
2022-08-25 SERVICIOS PROFESIONALES LA PARADA S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €480
2022-08-23 Operator of a public toilet
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 6Art. 13 €25,000
2022-08-22 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-08-19 ACCOR SA
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 12Art. 13Art. 15Art. 21 €600,000
2022-08-19 Medical laboratory
Insufficient technical and organisational measures to ensure information security
🇪🇺 Belgian Data Protection Authority (APD) Art. 5Art. 12Art. 13Art. 14 €20,000
2022-08-16 RODALI GESTIÓN INMOBILIARIA, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €5,000
2022-08-08 Company
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 13 €735
2022-08-08 Restaurant owner
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-08-08 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-08-03 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-08-01 Policoro municipality
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 24 €26,000
2022-08-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2022-07-28 Auto Hi-Fi System S.n.c
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2022-07-26 Volkswagen
Insufficient fulfilment of information obligations
🇪🇺 Data Protection Authority of Niedersachsen Art. 13Art. 28Art. 30Art. 35 €1,100,000
2022-07-22 Company
Non-compliance with general data processing principles
🇪🇺 National Commission for Data Protection (CNPD) Art. 5Art. 13 €10,000
2022-07-22 CINCON S.C.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €500