Article 15 GDPR — enforcement
Cited in 273 decisions · €82.1M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-09-03 | Rhodes Municipal Transport Company Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 12Art. 15 | €8,000 |
| 2021-08-26 | Dixons South East Europe ΑΕΒΕ-ΚΩΤΣΟΒΟΛΟΣ Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15 | €20,000 |
| 2021-08-26 | National Bank of Greece Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15 | €20,000 |
| 2021-07-27 | PRA Iberia S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 15 | €60,000 |
| 2021-07-08 | Pediatrician Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15 | €5,000 |
| 2021-06-09 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €2,000 |
| 2021-06-09 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €2,000 |
| 2021-06-09 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €2,000 |
| 2021-06-09 | CZECH REPUBLIC DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €2,000 |
| 2021-05-12 | A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 12Art. 15Art. 17 | €5,000 |
| 2021-04-21 | ParkkiPate Oy Insufficient fulfilment of data subjects rights | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 12Art. 14Art. 15 | €75,000 |
| 2021-04-16 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 15Art. 11 | €2,000 |
| 2021-04-15 | Istituto Nazionale Previdenza Sociale (INPS) Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 15 | €12,000 |
| 2021-03-25 | TECNOMEDICAL S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €7,000 |
| 2021-03-22 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 15Art. 11 | €2,000 |
| 2021-03-10 | Self Employed Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 5Art. 6Art. 12Art. 13 | €200 |
| 2021-03-03 | Cypriot Real Estate Registration Authority Insufficient fulfilment of information obligations | 🇪🇺 Cypriot Data Protection Commissioner | Art. 12Art. 15Art. 31Art. 58 | €10,000 |
| 2021-01-19 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €1,200 |
| 2021-01-14 | Poliambulatorio Talenti S.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €2,000 |
| 2020-12-23 | BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 14Art. 12Art. 15Art. 5 | €50,000 |
| 2020-12-01 | Legal Person Insufficient fulfilment of data subjects rights | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 15 | €800 |
| 2020-11-23 | Vodafone România SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 12Art. 15Art. 17 | €4,000 |
| 2020-11-18 | Carrefour France Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 12Art. 13Art. 15 | €2,250,000 |
| 2020-11-12 | Vodafone Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 15 | €12,251,601 |
| 2020-10-23 | Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 12Art. 15Art. 18Art. 25 | €54,800 |