Article 15 GDPR — enforcement
Cited in 288 decisions · €91.5M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-04-16 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 15Art. 11 | €2,000 |
| 2021-04-15 | Istituto Nazionale Previdenza Sociale (INPS) Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 15 | €12,000 |
| 2021-03-25 | TECNOMEDICAL S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €7,000 |
| 2021-03-22 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 15Art. 11 | €2,000 |
| 2021-03-10 | Self Employed Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 5Art. 6Art. 12Art. 13 | €200 |
| 2021-03-03 | Cypriot Real Estate Registration Authority Insufficient fulfilment of information obligations | 🇪🇺 Cypriot Data Protection Commissioner | Art. 12Art. 15Art. 31Art. 58 | €10,000 |
| 2021-01-19 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €1,200 |
| 2021-01-14 | Poliambulatorio Talenti S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €2,000 |
| 2020-12-23 | BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 14Art. 12Art. 15Art. 5 | €50,000 |
| 2020-12-01 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €800 |
| 2020-11-23 | Vodafone România SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 12Art. 15Art. 17 | €4,000 |
| 2020-11-18 | Carrefour France Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 12Art. 13Art. 15 | €2,250,000 |
| 2020-11-12 | Vodafone Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 15 | €12,251,601 |
| 2020-10-23 | Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 12Art. 15Art. 18Art. 25 | €54,800 |
| 2020-10-19 | Bank of Cyprus Public Company Ltd Insufficient technical and organisational measures to ensure information security | 🇪🇺 Cypriot Data Protection Commissioner | Art. 5Art. 15Art. 32Art. 33 | €15,000 |
| 2020-09-30 | Legal Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 5Art. 6Art. 12Art. 14 | €20,050 |
| 2020-09-25 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €400 |
| 2020-09-17 | Legal Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 6Art. 15Art. 17 | €3,200 |
| 2020-08-31 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €1,200 |
| 2020-08-06 | GTL S.R.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €3,000 |
| 2020-08-04 | Mapei S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €15,000 |
| 2020-08-04 | National Institute for Social Security - Department of the Province of Brescia Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 15 | €5,000 |
| 2020-08-03 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 15 | €3,000 |
| 2020-08-03 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €2,000 |
| 2020-07-30 | HDPA (Greece) - 23/2020 | 🇬🇷 HDPA (Greece) | Art. 41Art. 4Art. 47Art. 5 | — |