Article 13 GDPR — enforcement

Cited in 651 decisions · €4.1B total fines · median €5,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Read Article 13 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 88	€2,000
2026-02-12	Comune di Velletri Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25	€1,500
2026-02-12	Sole Trader Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€1,000
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2026-01-30	Hungarian University of Agriculture and Life Sciences Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13	€4,200
2026-01-29	Ministero della Cultura Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2026-01-29	Istituto San Giuseppe La Salle di Milano Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2026-01-19	DSB (Austria) - 2025-1.049.138	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 131 Art. 13	€25,500
2026-01-16	Garante per la protezione dei dati personali (Italy) - 10214411	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 61 Art. 6	€1,500
2026-01-16	DSB (Austria) - 2026-0.043.390	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 12 Art. 13	—
2026-01-08	Money Seeds S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€2,000
2026-01-08	Money Seeds S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€2,000
2025-12-30	Company Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 6 Art. 13 Art. 32 Art. 35	€3,500,000
2025-12-29	Order of General Nurses, Midwives and Medical Assistants of Romania – Neamt Branch Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2025-12-29	Order of General Nurses, Midwives and Medical Assistants of Romania – Neamt Branch Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2025-12-18	Bank Non-compliance with general data processing principles	🇭🇷 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 13 Art. 25	€1,500,000
2025-12-18	Anticimex s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€40,000
2025-12-18	Comune di Nave Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€6,000
2025-12-18	Elba Catering Distribuzioni s.r.I.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€2,000
2025-12-08	Legal Entity Insufficient fulfilment of data subjects rights	🇪🇺 Slovenian Supervisory Authority (Informacijski pooblaščenec)	Art. 12 Art. 13	€5,100
2025-12-04	Comune di Tuscania Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2025-12-04	'Principe Umberto di Savoia' State Scientific and Linguistic High School Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€1,000
2025-12-01	RISING SUN CAR RENTAL S..L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13	€3,600
2025-12-01	RISING SUN CAR RENTAL S..L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13	€3,600

← previous 76–100 of 651 next →