Skip to content

Article 13 GDPR — enforcement

Cited in 621 decisions · €2.9B total fines · median €4,545 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (223)

Date ↓ Company / party Authority Articles Fine
2023-11-30 Limit Call S.r.l.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €60,000
2023-11-30 A R.L Spartan Gym
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114 €3,000
2023-11-30 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-11-20 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-11-16 Comune di Castel Goffredo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €50,000
2023-11-16 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €500
2023-11-06 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €240
2023-11-03 Hotel
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-10-31 Private individual
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €180
2023-10-23 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-10-15 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-10-12 GROUPE CANAL +
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 7Art. 12Art. 13Art. 14 €600,000
2023-10-12 Scionti Selezioni Superiori S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €70,000
2023-10-11 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €5,300
2023-10-05 Debt collection company
Insufficient legal basis for data processing
🇪🇺 Croatian Data Protection Authority (azop) Art. 5Art. 6Art. 12Art. 13 €5,470,000
2023-10-03 Schockholm School borard
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) Art. 5Art. 6Art. 13 €70,000
2023-09-28 Palombaro s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €3,000
2023-09-27 CHINA CENTER LLEIDA
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €420
2023-09-26 Hotel
Insufficient legal basis for data processing
🇪🇺 Croatian Data Protection Authority (azop) Art. 6Art. 13Art. 32Art. 38 €15,000
2023-09-26 Self Employed Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 5Art. 13 €1,040
2023-09-25 FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 9Art. 13 €17,000
2023-09-25 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €600
2023-09-23 CHATWITH.IO WORLDWIDE, S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13Art. 22 €12,000
2023-09-21 LUXEMBOURG DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇺 National Commission for Data Protection (CNPD) Art. 5Art. 13 €2,500
2023-09-19 Private individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €1,500