Article 17 GDPR — enforcement

Cited in 152 decisions · €89.5M total fines · median €6,500 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (36)

Read Article 17 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-12-18	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 17	€200
2020-11-30	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 17	€2,000
2020-11-30	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 17	€1,200
2020-11-23	Vodafone România SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17	€4,000
2020-11-18	Carrefour France Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 12 Art. 13 Art. 15	€2,250,000
2020-09-17	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 15 Art. 17	€3,200
2020-09-08	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 17	€2,000
2020-08-04	Mapei S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2020-07-30	SC Viva Credit IFN SA Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 17	€2,000
2020-07-23	Employer Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 12 Art. 15 Art. 17	€1,700
2020-07-14	Google Belgium SA Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 12	€600,000
2020-06-16	BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 17 Art. 21 Art. 31	€1,000
2020-06-11	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 17	€4,010
2020-03-11	Google LLC Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 5 Art. 6 Art. 17	€5,000,000
2020-03-05	San Giorgio Jonico Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17	€3,000
2020-03-04	Representative of a local government Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 15	€290
2020-01-15	TIM (telecommunications operator) Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17 Art. 21	€27,800,000
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2019-12-17	Nursing Care Organisation Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 12 Art. 15 Art. 17	€2,000
2019-12-11	Eni Gas e Luce Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17 Art. 21	€8,500,000
2019-11-22	BNP Paribas Personal Finance S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€2,000
2019-09-19	Delivery Hero Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Authority of Berlin	Art. 15 Art. 17 Art. 21	€195,407
2019-08-26	Online Services Insufficient fulfilment of data subjects rights	🇪🇺 Data State Inspectorate (DSI)	Art. 17	€7,000
2019-06-26	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 17	€2,850

← previous 126–150 of 152 next →