Skip to content

Article 13 GDPR — enforcement

Cited in 597 decisions · €837.4M total fines · median €4,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2019-12-17 Website providing legal information
Insufficient fulfilment of information obligations
🇪🇺 Belgian Data Protection Authority (APD) Art. 6Art. 12Art. 13 €15,000
2019-12-11 Unknown Company
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 13Art. 24 €1,430
2019-12-10 Megastar SL
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €1,600
2019-12-03 Cerrajeria Verin S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €1,500
2019-11-21 Futura Internationale
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 6Art. 13Art. 14 €500,000
2019-11-07 TODOTECNICOS24H S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €900
2019-11-06 Cerrajero Online
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €900
2019-10-17 UTTIS INDUSTRIES SRL
Insufficient fulfilment of information obligations
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 12Art. 13Art. 5Art. 6 €2,500
2019-10-15 Unknown Company
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 13Art. 24 €2,860
2019-08-02 Public area maintenance company
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 13 €4,290
2019-08-01 Company in the medical sector
Insufficient fulfilment of information obligations
🇪🇺 Austrian Data Protection Authority (dsb) Art. 13Art. 35Art. 37 €25,000
2019-07-30 PWC Business Solutions
Insufficient legal basis for data processing
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 13Art. 14 €150,000
2019-06-13 Employer UNIONTRAD COMPANY
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 12Art. 13Art. 32 €20,000
2019-05-23 Organizer of SZIGET festival and VOLT festival
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 6Art. 5Art. 13 €92,146
2019-03-25 PORTUGAL DPA: Insufficient fulfilment of information obligations
Insufficient fulfilment of information obligations
🇪🇺 Portuguese Data Protection Authority (CNPD) Art. 13 €2,000
2019-03-19 PORTUGAL DPA: Insufficient fulfilment of information obligations
Insufficient fulfilment of information obligations
🇪🇺 Portuguese Data Protection Authority (CNPD) Art. 13 €2,000
2019-03-04 Unnamed financial institution
Insufficient fulfilment of data subjects rights
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 13Art. 17Art. 6 €3,200
2019-01-21 Google LLC
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 13Art. 14Art. 6Art. 5 €50,000,000
2018-12-20 Private person
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 6Art. 13 €2,200
2018-12-18 HUNGARY DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 12Art. 15Art. 18Art. 13 €3,200
2018-12-09 Betting place
Insufficient fulfilment of information obligations
🇪🇺 Austrian Data Protection Authority (dsb) Art. 13 €4,800
2018-01-01 Kebab restaurant
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 13Art. 14 €1,800