Article 14 GDPR — enforcement

Cited in 140 decisions · €343.9M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Read Article 14 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2023-11-02	Voorschoten municipality Non-compliance with general data processing principles	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 14	€30,000
2023-10-12	GROUPE CANAL + Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 7 Art. 12 Art. 13 Art. 14	€600,000
2023-05-04	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€3,810
2023-04-13	TIM S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€7,631,175
2023-03-09	Aesse S.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€3,000
2023-02-23	Ediscom S.p.a. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 14	€300,000
2023-01-01	MALTA DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 12 Art. 13 Art. 14	€2,500
2022-12-15	Azienda Universitaria Friuli Centrale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Giuliano Isontina Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Friuli Occidentale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-11-24	ÉLECTRICITÉ DE FRANCE Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 7 Art. 12 Art. 13 Art. 14	€600,000
2022-10-06	Alpha Exploration Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000,000
2022-09-22	Gas station Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 14	€3,000
2022-09-21	Property development company Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Baden-Wuerttemberg	Art. 6 Art. 14	€50,000
2022-09-15	Lazio Region Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€100,000
2022-08-19	Medical laboratory Insufficient technical and organisational measures to ensure information security	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€20,000
2022-08-11	AMPLIFON Hungary Trade and Service Provider LLC Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 14	€197,000
2022-06-23	TotalEnergies Electricité et Gaz France Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 14 Art. 15 Art. 21	€1,000,000
2022-06-16	SA Rossel & Cie Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 6 Art. 7 Art. 12 Art. 13	€0
2022-05-25	Roularta Media Group Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2022-05-18	Clearview Al Inc. Non-compliance with general data processing principles	🇪🇺 Information Commissioner (ICO)	Art. 5 Art. 6 Art. 9 Art. 14	€9,000,000
2022-04-28	Tarento municipality Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€150,000
2022-04-28	Nos s.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€20,000
2022-04-07	Azienda ospedaliera di Perugia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 14 Art. 25	€40,000
2022-03-28	Klarna Bank AB Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Sweden	Art. 5 Art. 12 Art. 13 Art. 14	€720,000

← previous 51–75 of 140 next →