Article 14 GDPR — enforcement

Cited in 148 decisions · €352.5M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Read Article 14 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2022-06-23	TotalEnergies Electricité et Gaz France Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 14 Art. 15 Art. 21	€1,000,000
2022-06-16	SA Rossel & Cie Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 6 Art. 7 Art. 12 Art. 13	€0
2022-05-25	Roularta Media Group Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2022-05-18	Clearview Al Inc. Non-compliance with general data processing principles	🇪🇺 Information Commissioner (ICO)	Art. 5 Art. 6 Art. 9 Art. 14	€9,000,000
2022-04-28	Tarento municipality Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€150,000
2022-04-28	Nos s.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€20,000
2022-04-07	Azienda ospedaliera di Perugia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 14 Art. 25	€40,000
2022-03-28	Klarna Bank AB Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Sweden	Art. 5 Art. 12 Art. 13 Art. 14	€720,000
2022-02-10	Studio Colli Aniene Verderocca S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 14 Art. 15 Art. 17	€1,500
2022-02-08	Budapest Bank Zrt. Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 13	€634,000
2022-02-02	IAB Europe Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€0
2022-01-27	Cosmote Mobile Telecommunications S.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 13 Art. 14 Art. 25	€6,000,000
2022-01-27	EU DisinfoLab Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€2,800
2022-01-27	Researcher Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€1,200
2022-01-17	C-Planet (IT Solutions) Limited Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 9 Art. 14	€65,000
2022-01-01	Debt collection company Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Baden-Wuerttemberg	Art. 6 Art. 14	—
2021-12-31	INFO COMMUNICATION SERVICES Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 13 Art. 14 Art. 11	€30,000
2021-12-31	PLUS REAL ADVERTISEMENT Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 13 Art. 14 Art. 11	€25,000
2021-12-08	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 12 Art. 14 Art. 15 Art. 17	€10,000
2021-11-25	B&T S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€400,000
2021-09-16	Sky Italia S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€3,296,326
2021-09-02	WhatsApp Ireland Ltd. Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 12 Art. 13 Art. 14	€225,000,000
2021-07-30	Private Individual Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 14	€200
2021-07-26	Monsanto Company Insufficient fulfilment of information obligations	🇪🇺 French Data Protection Authority (CNIL)	Art. 14 Art. 28	€400,000
2021-07-20	SGAM AG2R LA MONDIALE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 14	€1,750,000

← previous 76–100 of 148 next →