Article 13 GDPR — enforcement

Cited in 620 decisions · €2.9B total fines · median €4,290 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Read Article 13 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-03-26	Physician Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 13	€2,000
2026-03-26	Copacabana s.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-03-26	Business Owner Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-03-24	Advertising Agency Insufficient legal basis for data processing	🇦🇹 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 13	€6,300
2026-03-20	Public and Private Domain SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-03-20	Domeniul Public și Privat SA Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€3,000
2026-03-13	RAMÓN GRAU, S.L. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 6 Art. 13	€18,000
2026-03-12	ITAS Mutua Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€50,000
2026-03-12	Hanako s.r.l. Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 32	€2,000
2026-03-12	Barber Shop Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€800
2026-03-04	ARES CAPITAL, S.A. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 13	€200,000
2026-03-02	MALAGASUITE SHOWROOM, S.L. Insufficient fulfilment of data subjects rights	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 13	€2,000
2026-02-26	Depac Società Cooperativa Sociale a r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 30	€15,000
2026-02-20	University of Szeged Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 13	€5,570
2026-02-12	Bressanelli Galli Gelpi Porta & C. S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2026-02-12	Based s.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€12,000
2026-02-12	Comune di Coccaglio Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€6,000
2026-02-12	Comune di Mazara del Vallo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€4,000
2026-02-12	Comune di Velletri Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 88	€2,000
2026-02-12	Comune di Monterotondo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25	€1,500
2026-02-12	Sole Trader Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€1,000
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2026-01-30	Hungarian University of Agriculture and Life Sciences Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13	€4,200

← previous 26–50 of 620 next →