Article 17 GDPR — enforcement

Cited in 169 decisions · €90.6M total fines · median €8,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (36)

Read Article 17 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2024-01-04	Website operator Insufficient fulfilment of data subjects rights	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 17 Art. 25 Art. 58	€10,000
2023-11-07	Municipality Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 6 Art. 17	€5,000
2023-10-18	FESTINA LOTUS S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 17	€600
2023-10-06	DSB (Austria) - DSB-D124.5337	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 61 Art. 6	—
2023-08-31	Mednow Medical Center di Giugni Marco Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 12 Art. 15	€10,000
2023-07-18	Università Telematica E-Campus Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€75,000
2023-07-18	Compara Facile S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2023-06-29	HDPA (Greece) - 54/2024	🇬🇷 HDPA (Greece)	Art. 122 Art. 12 Art. 123 Art. 17	—
2023-06-20	Dante International SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€40,000
2023-06-07	RCI BANQUE, S.A. SUCURSAL EN ESPAÑA Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 17	€20,000
2023-06-02	QUALITY-PROVIDER S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 17	€20,000
2023-05-17	Website operator Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€60,000
2023-05-17	Grizzaffi Management Srl Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 17 Art. 21	€10,000
2023-02-28	GRUPO NORCONSULTING, S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 15 Art. 17	€15,000
2023-02-28	GUUDJOB WORLDWIDE S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 12 Art. 17	€800
2023-02-28	EUROPYMES SERVICIOS INTEGRALES S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 17	€800
2023-02-06	Sats ASA Insufficient fulfilment of data subjects rights	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12 Art. 13	€900,000
2023-01-18	Dante Internațional SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 17	€1,000
2022-12-08	FREE SAS Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 12 Art. 15 Art. 17 Art. 32	€300,000
2022-11-10	I-Model s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 17	€10,000
2022-10-17	Clearview Al Inc. Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 6 Art. 12 Art. 15 Art. 17	€20,000,000
2022-10-06	Codess Sociale, Soc. Coop. sociale. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 12 Art. 17	€10,000
2022-08-05	Colosseo S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 15	€1,000
2022-05-18	Google LLC Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 17	€10,000,000
2022-05-18	Clearview Al Inc. Non-compliance with general data processing principles	🇪🇺 Information Commissioner (ICO)	Art. 5 Art. 6 Art. 9 Art. 14	€9,000,000

← previous 76–100 of 169 next →