Skip to content

Article 14 GDPR — enforcement

Cited in 140 decisions · €343.9M total fines · median €20,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (30)

Date ↓ Company / party Authority Articles Fine
2020-06-22 Comunidad de propietarios demelza beach
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000
2020-06-16 Café Bar
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000
2020-06-09 Salad Market S.L. (Catering Company)
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 14 €3,000
2020-06-09 Chenming Ye (Bazar Real)
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 14 €540
2020-05-22 Posti Group Oyj
Insufficient fulfilment of data subjects rights
🇪🇺 Deputy Data Protection Ombudsman Art. 12Art. 13Art. 14Art. 15 €100,000
2020-03-16 Amalfi Servicios de Restauracion S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13Art. 14 €6,000
2020-03-12 Homeowners Association
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13Art. 14 €2,000
2020-03-06 Retailer
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 14 €3,200
2020-01-01 Municipality
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 5Art. 6Art. 13Art. 14
2019-11-21 Futura Internationale
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 6Art. 13Art. 14 €500,000
2019-08-08 Government Office Managing the Real Estate Register
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 14 €1,715
2019-07-30 PWC Business Solutions
Insufficient legal basis for data processing
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 13Art. 14 €150,000
2019-03-26 Private company working with data from publicly available sources
Insufficient fulfilment of information obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 14 €220,000
2019-01-21 Google LLC
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 13Art. 14Art. 6Art. 5 €50,000,000
2018-01-01 Kebab restaurant
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 13Art. 14 €1,800