Article 13 GDPR — enforcement

Cited in 651 decisions · €4.1B total fines · median €5,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Read Article 13 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-06-10	Kristiansand municipality Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 12 Art. 13	€22,000
2025-05-21	Menarini Silicon Biosystems SpA Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€21,000
2025-05-21	Menarini Silicon Biosystems SpA Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€21,000
2025-04-29	MA Immobiliare S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-04-29	MA Immobiliare S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-04-10	Luka Inc. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€5,000,000
2025-04-10	Luka Inc. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€5,000,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-03-28	GRUAS IGNACI, S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13 Art. 32	€6,600
2025-03-28	GRUAS IGNACI, S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 13 Art. 32	€6,600
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-27	Multiple Companies Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€18,000
2025-03-24	Hospital Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14 Art. 25 Art. 28	€4,000
2025-03-24	Hospital Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14 Art. 25 Art. 28	€4,000
2025-03-24	Hospital Insufficient technical and organisational measures to ensure information security	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 32 Art. 33 Art. 34	€3,000

← previous 151–175 of 651 next →