Article 14 GDPR — enforcement

Cited in 140 decisions · €343.9M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Read Article 14 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2022-02-10	Studio Colli Aniene Verderocca S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 14 Art. 15 Art. 17	€1,500
2022-02-08	Budapest Bank Zrt. Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 13	€634,000
2022-02-02	IAB Europe Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€0
2022-01-27	Cosmote Mobile Telecommunications S.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 13 Art. 14 Art. 25	€6,000,000
2022-01-27	EU DisinfoLab Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€2,800
2022-01-27	Researcher Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€1,200
2022-01-17	C-Planet (IT Solutions) Limited Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Commissioner of Malta	Art. 5 Art. 6 Art. 9 Art. 14	€65,000
2022-01-01	Debt collection company Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Baden-Wuerttemberg	Art. 6 Art. 14	—
2021-12-31	INFO COMMUNICATION SERVICES Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 13 Art. 14 Art. 11	€30,000
2021-12-31	PLUS REAL ADVERTISEMENT Insufficient fulfilment of information obligations	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 13 Art. 14 Art. 11	€25,000
2021-12-08	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 12 Art. 14 Art. 15 Art. 17	€10,000
2021-11-25	B&T S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€400,000
2021-09-16	Sky Italia S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€3,296,326
2021-09-02	WhatsApp Ireland Ltd. Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 12 Art. 13 Art. 14	€225,000,000
2021-07-30	Private Individual Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 14	€200
2021-07-26	Monsanto Company Insufficient fulfilment of information obligations	🇪🇺 French Data Protection Authority (CNIL)	Art. 14 Art. 28	€400,000
2021-07-20	SGAM AG2R LA MONDIALE Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 14	€1,750,000
2021-07-05	Insurance company Insufficient fulfilment of information obligations	🇪🇺 Croatian Data Protection Authority (azop)	Art. 13 Art. 14	—
2021-06-07	Region Stockholm Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 5 Art. 13 Art. 14	€50,000
2021-04-23	Equifax Iberica S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 14	€1,000,000
2021-04-21	ParkkiPate Oy Insufficient fulfilment of data subjects rights	🇪🇺 Deputy Data Protection Ombudsman	Art. 5 Art. 12 Art. 14 Art. 15	€75,000
2021-03-10	Filigrana Comunicación S.L.U. Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 13 Art. 14	€8,000
2021-03-10	Self Employed Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 13	€200
2021-01-20	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€26,710
2021-01-20	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€11,430

← previous 76–100 of 140 next →