Skip to content

Article 15 GDPR — enforcement

Cited in 288 decisions · €91.5M total fines · median €10,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (82)

Date ↓ Company / party Authority Articles Fine
2022-03-08 Energy company (name not available at the moment)
Insufficient fulfilment of data subjects rights
🇪🇺 Croatian Data Protection Authority (azop) Art. 15 €124,245
2022-02-15 ΛΙΜΕΝΟΣ ΗΡΑΚΛΕΙΟΥ Α.Ε.
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 12Art. 15 €30,000
2022-02-10 Studio Colli Aniene Verderocca S.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 14Art. 15Art. 17 €1,500
2022-01-27 T.S.M. s.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 13Art. 15Art. 21Art. 157 €40,000
2022-01-27 BfDI (Germany) - 24-191 II 🇩🇪 BfDI (Germany) Art. 15Art. 20Art. 95
2022-01-20 Kaufland România SCS
Insufficient fulfilment of data subjects rights
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 15 €3,000
2022-01-13 Medicina & Lavoro s.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €4,000
2022-01-01 Company
Insufficient fulfilment of data subjects rights
🇪🇺 Data Protection Authority of Niedersachsen Art. 15Art. 21 €50,000
2022-01-01 Credit agency
Insufficient fulfilment of data subjects rights
🇪🇺 Data Protection Authority of Berlin Art. 15
2021-12-28 FREE MOBILE
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 12Art. 15Art. 21Art. 25 €300,000
2021-12-26 Medical clinic
Insufficient fulfilment of information obligations
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 12Art. 13Art. 15 €5,000
2021-12-09 Limerick City and County Council
Insufficient fulfilment of data subjects rights
🇪🇺 Data Protection Authority of Ireland Art. 13Art. 12Art. 15 €110,000
2021-12-08 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 12Art. 14Art. 15Art. 17 €10,000
2021-11-11 TIM S.p.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 15 €150,000
2021-09-03 Rhodes Municipal Transport Company
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 12Art. 15 €8,000
2021-08-26 National Bank of Greece
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 12Art. 15 €20,000
2021-08-26 Dixons South East Europe ΑΕΒΕ-ΚΩΤΣΟΒΟΛΟΣ
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 12Art. 15 €20,000
2021-07-27 PRA Iberia S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 15 €60,000
2021-07-08 Pediatrician
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 12Art. 15 €5,000
2021-06-09 Legal Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 15 €2,000
2021-06-09 Legal Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 15 €2,000
2021-06-09 Legal Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 15 €2,000
2021-06-09 CZECH REPUBLIC DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 15 €2,000
2021-05-12 A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 12Art. 15Art. 17 €5,000
2021-04-21 ParkkiPate Oy
Insufficient fulfilment of data subjects rights
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 12Art. 14Art. 15 €75,000