Skip to content

Article 14 GDPR — enforcement

Cited in 140 decisions · €343.9M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Date ↓ Company / party Authority Articles Fine
2021-01-13 Caixabank S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 14 €2,000,000
2021-01-04 CZECH REPUBLIC DPA: Insufficient legal basis for data processing
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €118,500
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 15Art. 5 €50,000
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 6Art. 5 €15,000
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €26,710
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €12,910
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,830
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,430
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,430
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €10,070
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €9,420
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,800
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,800
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,340
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €8,100
2020-12-17 Roma Capitale (Rome Municipality)
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €500,000
2020-12-17 Azienda Unità Sanitaria Locale Toscana Sud Est
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €100,000
2020-12-07 Perfomeclic
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 14Art. 21Art. 28 €7,300
2020-11-25 Miraclia Telecomunicaciones S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 14 €40,000
2020-11-17 Comune di Collegno
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 13Art. 14 €2,000
2020-09-30 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 5Art. 6Art. 12Art. 14 €20,050
2020-08-06 GROW BEATS SL
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 12Art. 13Art. 14 €3,000
2020-08-05 Spartoo
Non-compliance with general data processing principles
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 13Art. 14 €250,000
2020-07-28 Communal political association
Insufficient legal basis for data processing
🇪🇺 Belgian Data Protection Authority (APD) Art. 5Art. 6Art. 14 €3,000
2020-07-20 Comercial Vigobrandy, SL
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 12Art. 13Art. 14 €1,500