Article 2 GDPR — enforcement
Cited in 77 decisions · €6.5M total fines · median €6,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (70)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-08-04 | Finnish DPA examines anti-doping organization's GDPR compliance over public suspension | 🇫🇮 Tietosuojavaltuutetun toimisto (Finland) | Art. 22Art. 2Art. 51Art. 5 | — |
| 2026-07-15 | AEPD (Spain) - E/03783/2020 | 🇪🇸 AEPD (Spain) | Art. 2 | — |
| 2026-06-18 | Garante per la protezione dei dati personali (Italy) - 462/2026 | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 21Art. 2Art. 41Art. 4 | €6,600 |
| 2026-04-29 | Nouva Corrente S.r.l. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 1 | €15,000 |
| 2026-01-09 | DSB (Austria) - DSB-D124.2437/25 | 🇦🇹 DSB (Austria) | Art. 2Art. 41Art. 4Art. 42 | — |
| 2024-12-12 | Physician Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 2 | €20,000 |
| 2024-11-13 | Foodinho Srl Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 12 | €5,000,000 |
| 2024-06-20 | Municipality of Nepi Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 28Art. 2 | €20,000 |
| 2024-06-06 | Comune di Ustica Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 37 | €500 |
| 2024-05-23 | Professional association Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 27Art. 2 | €3,500 |
| 2024-05-09 | Medical association Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €3,000 |
| 2024-04-24 | I.N.P.A.S. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €3,000 |
| 2024-04-11 | Istituto Nazionale di Previdenza Sociale Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €20,000 |
| 2024-02-22 | Camera di Commercio Industria Artigianato e Agricoltura Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €2,000 |
| 2024-01-24 | Municipality Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 37 | €6,000 |
| 2024-01-24 | Istituto Comprensivo Statale “F.S. Cabrini Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €2,000 |
| 2023-10-26 | Region of Lombardy Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €20,000 |
| 2023-09-28 | Ministero dell'Ambiente e della Sicurezza Energetica Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €5,000 |
| 2023-09-14 | San Severo municipality Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €10,000 |
| 2023-08-31 | Bar association Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 2 | €20,000 |
| 2023-08-31 | RCS Mediagroup Spa Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 2Art. 137Art. 139 | €10,000 |
| 2023-07-18 | Cat s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €10,000 |
| 2023-06-07 | Azienda Tutela della Salute della Sardegna Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 2 | €5,000 |
| 2023-06-01 | Azienda Usl Toscana Sud Est. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 25Art. 2 | €20,000 |
| 2023-06-01 | Comune di Napoli Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €3,000 |
1–25 of 77 next →