Article 20 GDPR — enforcement

Cited in 9 decisions · €1.2M total fines · median €59,600 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (5)

Read Article 20 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-09-11	Migliarino San Rossore Massaciuccoli Regional Park Authority Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 20	€8,000
2025-09-11	Migliarino San Rossore Massaciuccoli Regional Park Authority Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 20	€8,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2024-06-20	Fastweb S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€1,000,000
2022-01-27	BfDI (Germany) - 24-191 II	🇩🇪 BfDI (Germany)	Art. 15 Art. 20 Art. 95	—
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2019-09-03	CNPD (Portugal) - Deliberação 2019/494	🇵🇹 CNPD (Portugal)	Art. 288 Art. 2 Art. 3 Art. 56	—