Article 15 GDPR — enforcement

Cited in 314 decisions · €109.5M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)

Read Article 15 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-23	Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 12 Art. 13 Art. 15	€39,000
2026-09-16	Italian DPA sanctions Experian Italia for incomplete Art. 15 GDPR access responses on	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 12	€120
2026-09-15	APDCAT: Public body violated GDPR by disclosing audio recording to four extra recipients	🇪🇸 APDCAT (Catalonia)	Art. 51 Art. 5 Art. 6 Art. 12	€3,150
2026-09-15	AEPD: Data subject entitled to identity of professionals who accessed medical records	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 52 Art. 12	—
2026-09-08	IP Slovenia: Controller breached Art. 15(1)(d) and 15(3) GDPR by denying storage info and	🇸🇮 IP (Slovenia)	Art. 12 Art. 151 Art. 15 Art. 153	—
2026-08-26	DSB: Retailer must grant full access and delete data after third-party fraud order	🇦🇹 DSB (Austria)	Art. 61 Art. 6 Art. 145 Art. 14	—
2026-08-25	Datatilsynet reprimands Danish Tax Administration for access request delays (2019-2024)	🇩🇰 Datatilsynet (Denmark)	Art. 123 Art. 12 Art. 15	—
2026-08-19	Garante per la protezione dei dati personali (Italy) - 10266250	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-08-18	Datatilsynet (Denmark) - 2023-31-0321	🇩🇰 Datatilsynet (Denmark)	Art. 122 Art. 12 Art. 123 Art. 124	—
2026-08-06	Leontinoi Società Cooperativa Sociale Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15 Art. 31	€1,000
2026-08-03	AZOP (Croatia) - Decision 08-03-2022 (energy company)	🇭🇷 AZOP (Croatia)	Art. 153 Art. 15	€940,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-23	TIM S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 15	€9,516,000
2026-07-21	AEPD (Spain) - PS-00159-2025	🇪🇸 AEPD (Spain)	Art. 14 Art. 15	€90,000
2026-07-17	CNIL (France) - SAN-2022-011	🇫🇷 CNIL (France)	Art. 12 Art. 14 Art. 15 Art. 21	€1,000,000
2026-07-17	AEPD (Spain) - EXP202103746	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 12 Art. 15	—
2026-07-03	Garante per la protezione dei dati personali (Italy) - 483/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 13 Art. 14	€5,800,000
2026-07-03	Hera Comm S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€5,800,000
2026-07-03	EstEnergy S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€1,400,000
2026-07-03	Garante per la protezione dei dati personali (Italy) - 484/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€1,400,000
2026-07-03	Cerved Group S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€400,000
2026-07-03	Experian Italia S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 25	€120,000
2026-06-12	Market-In Non-compliance with general data processing principles	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€95,000
2026-06-12	MEDE S.A. Non-compliance with general data processing principles	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€65,000
2026-06-11	Green Partner S.r.l.s. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300

1–25 of 314 next →