Article 15 GDPR — enforcement

Cited in 314 decisions · €109.5M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)

Read Article 15 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-06-05	ZeniΘ (Thessaloniki-Thessalia Gas Supply Company S.A.) Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 15 Art. 28	€100,000
2026-06-05	Piraeus Bank S.A. Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 15	€10,000
2026-05-14	Energia Sostenibile S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2026-05-14	Lidl Italia S.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 18	€43,000
2026-05-12	Isabel SA Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 15	€120,000
2026-05-08	Law Firm Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€4,920
2026-05-06	APD/GBA (Belgium) - 97/2026	🇧🇪 APD/GBA (Belgium)	Art. 122 Art. 12 Art. 123 Art. 124	—
2026-04-29	Pianeta S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€34,000
2026-04-29	Nouva Corrente S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 1	€15,000
2026-03-26	Esselunga S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15	€5,000
2026-03-12	ITAS Mutua Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€50,000
2026-03-07	Italian DPA finds Cerved Group failed to disclose creditworthiness scores in Art. 15	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 12 Art. 15	€400,000
2026-03-04	Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access	🇸🇮 IP (Slovenia)	Art. 13 Art. 15 Art. 17 Art. 32	—
2026-03-02	Suomen Numerokeskus Oy Insufficient fulfilment of data subjects rights	🇫🇮 Deputy Data Protection Ombudsman	Art. 15	€5,000
2026-02-26	S.M. Trattamento Acqua di XX Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 4 Art. 5 Art. 6 Art. 7	€30,000
2026-02-26	Groupharma s.r.l.s. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 17	€3,000
2026-02-20	KEAT - Centre for Education & Rehabilitation of the Blind Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 15	€5,000
2026-02-12	Bressanelli Galli Gelpi Porta & C. S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2026-02-12	Lex Iuris S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 6 Art. 15	€15,000
2026-02-12	Based s.r.l. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€12,000
2026-02-11	Vodafone – PANAFON A.E.E.T. Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 15 Art. 18	€30,000
2026-02-03	Alliance for the Union of Romanians (AUR) Party Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17 Art. 21	€1,000
2026-01-16	Timegrip AS Insufficient fulfilment of data subjects rights	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 15	€21,650
2026-01-12	DSB: Art. 15 GDPR access right does not extend to full documents with third-party data	🇦🇹 Datenschutzbehörde	Art. 15	—
2026-01-09	DSB (Austria) - DSB-D124.2437/25	🇦🇹 DSB (Austria)	Art. 2 Art. 41 Art. 4 Art. 42	—

← previous 26–50 of 314 next →