Article 2 GDPR — enforcement

Cited in 70 decisions · €6.4M total fines · median €6,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (70)

Read Article 2 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2024-12-12	Physician Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 2	€20,000
2024-11-13	Foodinho Srl Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€5,000,000
2024-06-20	Municipality of Nepi Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 28 Art. 2	€20,000
2024-06-06	Comune di Ustica Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 37	€500
2024-05-23	Professional association Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 27 Art. 2	€3,500
2024-05-09	Medical association Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€3,000
2024-04-24	I.N.P.A.S. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€3,000
2024-04-11	Istituto Nazionale di Previdenza Sociale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€20,000
2024-02-22	Camera di Commercio Industria Artigianato e Agricoltura Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€2,000
2024-01-24	Municipality Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 37	€6,000
2024-01-24	Istituto Comprensivo Statale “F.S. Cabrini Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€2,000
2023-10-26	Region of Lombardy Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€20,000
2023-09-28	Ministero dell'Ambiente e della Sicurezza Energetica Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€5,000
2023-09-14	San Severo municipality Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€10,000
2023-08-31	Bar association Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 2	€20,000
2023-08-31	RCS Mediagroup Spa Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 2 Art. 137 Art. 139	€10,000
2023-07-18	Cat s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€10,000
2023-06-07	Azienda Tutela della Salute della Sardegna Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 2	€5,000
2023-06-01	Azienda Usl Toscana Sud Est. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25 Art. 2	€20,000
2023-06-01	Comune di Napoli Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€3,000
2023-04-27	Ama S.p.a. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 28 Art. 29 Art. 32 Art. 2	€239,000
2023-04-27	Roma Capitale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 28 Art. 29	€176,000
2023-04-27	Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€15,000
2023-04-27	Università degli studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 2	€4,000
2023-04-13	Azienda socio sanitaria locale n. 3 di Nuoro Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€13,000

1–25 of 70 next →