Article 17 GDPR — enforcement

Cited in 162 decisions · €90.3M total fines · median €7,250 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (36)

Read Article 17 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-03-04	Representative of a local government Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 15	€290
2020-01-15	TIM (telecommunications operator) Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17 Art. 21	€27,800,000
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2019-12-17	Nursing Care Organisation Insufficient fulfilment of data subjects rights	🇪🇺 Belgian Data Protection Authority (APD)	Art. 12 Art. 15 Art. 17	€2,000
2019-12-11	Eni Gas e Luce Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17 Art. 21	€8,500,000
2019-11-22	BNP Paribas Personal Finance S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 17	€2,000
2019-09-19	Delivery Hero Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Authority of Berlin	Art. 15 Art. 17 Art. 21	€195,407
2019-08-26	Online Services Insufficient fulfilment of data subjects rights	🇪🇺 Data State Inspectorate (DSI)	Art. 17	€7,000
2019-06-26	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 17	€2,850
2019-06-12	Legal Person Insufficient fulfilment of data subjects rights	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 17	€400
2019-03-04	Unnamed financial institution Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 13 Art. 17 Art. 6	€3,200

← previous 151–162 of 162