Article 17 GDPR — enforcement

Cited in 169 decisions · €90.6M total fines · median €8,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (36)

Read Article 17 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-11-24	DSB (Austria) - 2025-0.950.759	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 61	—
2025-11-19	ASOCIACIÓN NACIONAL DE TASADORES Y PERITOS JUDICIALES INFORMÁTICOS Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 13 Art. 17	€2,000
2025-11-19	ASOCIACIÓN NACIONAL DE TASADORES Y PERITOS JUDICIALES INFORMÁTICOS Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 13 Art. 17	€2,000
2025-11-12	Fan Courier Express S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€4,000
2025-11-12	Fan Courier Express S.R.L. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€4,000
2025-11-10	Whitedecor SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 7 Art. 12 Art. 15	€2,000
2025-11-10	Whitedecor SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 7 Art. 12 Art. 15	€2,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-09-18	Dr. Max SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€1,000
2025-07-24	Debt Collector Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 17	€26,400
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-05-19	ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 17	€200,000
2025-05-19	ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 17	€200,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Versilmagra Immobiliare di Robertelli Davide & C. S.a.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000

← previous 26–50 of 169 next →