Article 15 GDPR — enforcement
Cited in 286 decisions · €91.4M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2023-11-30 | Techno Security s.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €1,000 |
| 2023-11-23 | Alpha Bank Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15 | €10,000 |
| 2023-11-21 | EASYJET AIRLINE COMPANY LIMITED Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 15 | €8,000 |
| 2023-11-16 | Autostrade per l’Italia S.p.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €100,000 |
| 2023-11-16 | Amazon Italia Transport s.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €40,000 |
| 2023-11-10 | Piraeus Leasing S.M.S.A. Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 15 | €20,000 |
| 2023-10-12 | GROUPE CANAL + Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 7Art. 12Art. 13Art. 14 | €600,000 |
| 2023-10-12 | Scionti Selezioni Superiori S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €70,000 |
| 2023-09-14 | Intesa Sanpaolo Spa Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 15 | €42,000 |
| 2023-09-14 | Shardana Working Soc. Coop. a r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €20,000 |
| 2023-09-11 | Suomen Yritysrekisteri Insufficient fulfilment of data subjects rights | 🇪🇺 Deputy Data Protection Ombudsman | Art. 12Art. 15 | €23,000 |
| 2023-09-04 | Company Insufficient fulfilment of data subjects rights | 🇪🇺 Deputy Data Protection Ombudsman | Art. 12Art. 15 | €1,600 |
| 2023-08-31 | Mednow Medical Center di Giugni Marco Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 12Art. 15 | €10,000 |
| 2023-08-03 | Med Life SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 12Art. 15 | €2,000 |
| 2023-07-18 | Compara Facile S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €40,000 |
| 2023-07-06 | AcegasApsAmga SpA Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 15 | €10,000 |
| 2023-06-21 | Vodafone Romania SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 15 | €1,000 |
| 2023-06-12 | Spotify Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Sweden | Art. 12Art. 15 | €4,900,000 |
| 2023-06-12 | Piraeus Bank Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 15Art. 25 | €210,000 |
| 2023-05-31 | Deutsche Kreditbank Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 15Art. 22 | €300,000 |
| 2023-05-29 | NOVA TELECOMMUNICATIONS & MEDIA ΜΟΝΟΠΡΟΣΩΠΗ
Α.Ε., Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15Art. 21Art. 25 | €150,000 |
| 2023-05-17 | Website operator Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €60,000 |
| 2023-05-17 | Volkswagen Leasing GmbH Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €40,000 |
| 2023-05-11 | Libra Internet Bank SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 12Art. 15 | €11,000 |
| 2023-04-13 | TIM S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €7,631,175 |