Article 14 GDPR — enforcement

Cited in 148 decisions · €352.5M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Read Article 14 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-08-12	AEPD (Spain) - PS/00249/2025	🇪🇸 AEPD (Spain)	Art. 411 Art. 4 Art. 52 Art. 5	€10,000
2026-07-21	AEPD sanctions ACVIL Aparcamientos for denying access to parking surveillance footage	🇪🇸 AEPD (Spain)	Art. 14 Art. 15	€90,000
2026-07-17	CNIL fines energy supplier for mishandling data subject access and objection requests	🇫🇷 CNIL (France)	Art. 12 Art. 14 Art. 15 Art. 21	€1,000,000
2026-07-03	Italian Garante sanctions Hera Comm for automated credit-check refusals of contracts	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 13 Art. 14	€5,800,000
2026-07-03	Italian Garante sanctions EstEnergy for automated creditworthiness scoring in energy	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€1,400,000
2026-07-03	Italian DPA finds GDPR applies to US-based Character.AI service	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 52 Art. 5	€158,000
2026-05-28	Italian DPA: AgID's automatic transfer of PEC addresses to INAD index unlawful	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 52	€55,000
2026-05-26	IQVIA OPERATIONS FRANCE Non-compliance with general data processing principles	🇫🇷 French Data Protection Authority (CNIL)	Art. 14 Art. 25	€5,000,000
2026-05-08	Law Firm Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€4,920
2026-04-16	AKI (Estonia) - No. 2.1-1/24/397-890-38	🇪🇪 AKI (Estonia)	Art. 47 Art. 4 Art. 411 Art. 51	—
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2026-01-08	Money Seeds S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€2,000
2026-01-08	Money Seeds S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€2,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-08-31	GESTIÓN DE VENTAS IBERIA S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 14	€2,000
2025-08-31	GESTIÓN DE VENTAS IBERIA S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 14	€2,000
2025-07-16	Georgescu Călin Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€4,000
2025-07-16	Georgescu Călin Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 13 Art. 14	€4,000
2025-06-24	General Hospital of the University of Larissa Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 14 Art. 15	€7,000
2025-06-24	General Hospital of the University of Larissa Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 14 Art. 15	€7,000
2025-05-21	Data Diggers Market Research SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 12 Art. 14 Art. 15	€12,000
2025-05-21	Data Diggers Market Research SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 12 Art. 14 Art. 15	€12,000

1–25 of 148 next →