Skip to content

Article 13 GDPR — enforcement

Cited in 597 decisions · €837.4M total fines · median €4,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2021-10-28 Anfiteatro Flavio s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 13 €2,000
2021-10-28 OTTO s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 13 €2,000
2021-10-27 Car importer
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12Art. 13 €13,500
2021-10-19 BEEPING FULFILMENT S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €2,000
2021-10-06 LUXEMBOURG DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇺 National Commission for Data Protection (CNPD) Art. 5Art. 13 €5,300
2021-10-06 Facebook Ireland Limited
Insufficient fulfilment of information obligations
🇪🇺 Data Protection Authority of Ireland Art. 5Art. 12Art. 13
2021-10-04 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2021-09-24 Vattenfall Europe Sales GmbH
Insufficient data processing agreement
🇪🇺 Data Protection Authority of Hamburg Art. 12Art. 13 €900,000
2021-09-24 SPAIN DPA: Insufficient fulfilment of information obligations
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €3,000
2021-09-16 Bocconi University
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €200,000
2021-09-16 Ciechi Ardizzone Gioeni di Catania
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 35 €5,000
2021-09-16 Farpa s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 88Art. 114 €1,000
2021-09-13 Website operator
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €9,000
2021-09-13 Hairdressing salon
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2021-09-13 GESTIONES AUTO LOW COST S. L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2021-09-04 AMPUDIA DIAZ, S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €1,500
2021-09-02 WhatsApp Ireland Ltd.
Insufficient fulfilment of information obligations
🇪🇺 Data Protection Authority of Ireland Art. 5Art. 12Art. 13Art. 14 €225,000,000
2021-08-30 Furnishyourspace S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 12Art. 13 €6,000
2021-08-23 Company owner
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €2,000
2021-08-13 Employer
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2021-08-12 Waxing Palace AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6Art. 13 €9,600
2021-08-09 BAZTANDIS, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000
2021-08-05 Future Vinline S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €6,000
2021-07-27 PODEMOS PARTIDO POLÍTICO
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €2,400
2021-07-27 APARTAMENTOS PLAYA DE COVACHOS, S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,000