Article 13 GDPR — enforcement

Cited in 597 decisions · €837.4M total fines · median €4,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Read Article 13 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-06-12	Departement of Social Security Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 6 Art. 9 Art. 13	€550,000
2025-06-12	Departement of Social Security Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 6 Art. 9 Art. 13	€550,000
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-05-21	Menarini Silicon Biosystems SpA Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€21,000
2025-05-21	Menarini Silicon Biosystems SpA Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€21,000
2025-04-29	MA Immobiliare S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-04-29	MA Immobiliare S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-04-10	Luka Inc. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€5,000,000
2025-04-10	Luka Inc. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€5,000,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-03-28	GRUAS IGNACI, S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13 Art. 32	€6,600
2025-03-28	GRUAS IGNACI, S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13 Art. 32	€6,600
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-24	Hospital Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14 Art. 25 Art. 28	€4,000

← previous 101–125 of 597 next →