Skip to content

Article 14 GDPR — enforcement

Cited in 148 decisions · €352.5M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Date ↓ Company / party Authority Articles Fine
2021-07-05 Insurance company
Insufficient fulfilment of information obligations
🇪🇺 Croatian Data Protection Authority (azop) Art. 13Art. 14
2021-06-07 Region Stockholm
Insufficient fulfilment of information obligations
🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) Art. 5Art. 13Art. 14 €50,000
2021-04-23 Equifax Iberica S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 14 €1,000,000
2021-04-21 ParkkiPate Oy
Insufficient fulfilment of data subjects rights
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 12Art. 14Art. 15 €75,000
2021-03-10 Filigrana Comunicación S.L.U.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 14 €8,000
2021-03-10 Self Employed Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 5Art. 6Art. 12Art. 13 €200
2021-01-20 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €26,710
2021-01-20 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,430
2021-01-13 Caixabank S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 14 €2,000,000
2021-01-04 CZECH REPUBLIC DPA: Insufficient legal basis for data processing
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €118,500
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 15Art. 5 €50,000
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 6Art. 5 €15,000
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €26,710
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €12,910
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,830
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,430
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,430
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €10,070
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €9,420
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,800
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,800
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,340
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,100
2020-12-17 Roma Capitale (Rome Municipality)
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €500,000
2020-12-17 Azienda Unità Sanitaria Locale Toscana Sud Est
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €100,000