Article 14 GDPR — enforcement

Cited in 140 decisions · €343.9M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Read Article 14 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-04-22	Company Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€20,000
2025-04-22	Company Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€20,000
2025-04-15	Chamber of Commerce, Industry, Services and Navigation of Spain Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 14	€500,000
2025-04-15	Chamber of Commerce, Industry, Services and Navigation of Spain Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 14	€500,000
2025-04-15	CAMERDATA, S.A. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 14	€260,000
2025-04-15	CAMERDATA, S.A. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 14	€260,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-07	AMADEUS IT GROUP, S.A. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 6 Art. 14	€14,400,000
2025-04-02	Hospital Non-compliance with general data processing principles	🇲🇹 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 14 Art. 16	€20,000
2025-03-28	ESTUDIO ALCAZAR DEL GENIL 2022, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 14	€12,000
2025-03-28	ESTUDIO ALCAZAR DEL GENIL 2022, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 14	€12,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-24	Hospital Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14 Art. 25 Art. 28	€4,000
2025-03-24	Hospital Non-compliance with general data processing principles	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14 Art. 25 Art. 28	€4,000
2025-03-13	G@S Telecomunicazioni di Losito Lucia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€15,000
2025-01-16	Realmaps S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2024-05-31	GSMA Limited Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 9 Art. 14	€600,000
2024-05-27	Member of the European Parliament Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 6 Art. 14	€40,000
2024-04-04	HUBSIDE.STORE Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 6 Art. 14	€525,000
2024-01-16	Black Tiger Belgium Insufficient fulfilment of information obligations	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€174,640
2023-11-30	Limit Call S.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€60,000

← previous 26–50 of 140 next →