Skip to content

Article 14 GDPR — enforcement

Cited in 162 decisions · €1.2B total fines · median €20,050 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Date ↓ Company / party Authority Articles Fine
2026-09-23 Persónuvernd: Icelandic Farmers’ Association breached GDPR by disclosing owner data to 🇮🇸 Persónuvernd (Iceland) Art. 51Art. 5Art. 14 —
2026-09-16 AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber 🇪🇸 AEPD (Spain) Art. 411Art. 4Art. 52Art. 5 €10,000
2026-09-15 HDPA investigates Greek Infrastructure Ministry for SMS sent without consent or 🇬🇷 HDPA (Greece) Art. 51Art. 5Art. 14 —
2026-08-26 DSB: Retailer must grant full access and delete data after third-party fraud order 🇦🇹 DSB (Austria) Art. 61Art. 6Art. 145Art. 14 —
2026-08-21 Uber Technologies Inc.
Non-compliance with general data processing principles
🇪🇺 Dutch Supervisory Authority for Data Protection (AP) Art. 22Art. 13Art. 14 €824,990,000
2026-08-19 Garante per la protezione dei dati personali (Italy) - 10266250 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 5Art. 6Art. 7Art. 12 €15,300
2026-08-18 ANSPDCP (Romania) - AMATO BESTSELLER S.R.L. 🇷🇴 ANSPDCP (Romania) Art. 51Art. 5Art. 9Art. 324 €285,395
2026-08-06 AMATO BESTSELLER S.R.L
Non-compliance with general data processing principles
🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 32Art. 14Art. 5Art. 9 €45,000
2026-07-21 AEPD (Spain) - PS-00159-2025 🇪🇸 AEPD (Spain) Art. 14Art. 15 €90,000
2026-07-17 CNIL (France) - SAN-2022-011 🇫🇷 CNIL (France) Art. 12Art. 14Art. 15Art. 21 €1,000,000
2026-07-03 Hera Comm S.p.A.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €5,800,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 483/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 13Art. 14 €5,800,000
2026-07-03 EstEnergy S.p.A.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €1,400,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 484/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 51 €1,400,000
2026-07-03 Character Technologies Inc.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 14 €158,000
2026-07-03 Garante per la protezione dei dati personali (Italy) - 487/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 32Art. 3Art. 52Art. 5 €158,000
2026-05-28 Garante per la protezione dei dati personali (Italy) - 419/2026 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 51Art. 52 €55,000
2026-05-26 IQVIA OPERATIONS FRANCE
Non-compliance with general data processing principles
🇫🇷 French Data Protection Authority (CNIL) Art. 14Art. 25 €5,000,000
2026-05-14 Vortika s.r.l.
Insufficient fulfilment of information obligations
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 37 €30,000
2026-05-14 Francesco Gagliardi
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 14 €1,500
2026-05-14 FeGi M&A Services s.r.l.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 14 €1,000
2026-05-08 Law Firm
Insufficient fulfilment of data subjects rights
🇧🇪 Belgian Data Protection Authority (APD) Art. 5Art. 12Art. 13Art. 14 €4,920
2026-04-29 Pianeta S.r.l.
Non-compliance with general data processing principles
🇮🇹 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €34,000
2026-04-16 AKI (Estonia) - No. 2.1-1/24/397-890-38 🇪🇪 AKI (Estonia) Art. 47Art. 4Art. 411Art. 51 —
2026-01-30 Natural Person
Non-compliance with general data processing principles
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 9Art. 10 €10,000