Article 21 GDPR — enforcement

Cited in 131 decisions · €101.4M total fines · median €9,850 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (38)

Read Article 21 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-16	Garante fines BBVA Italy for ignoring in-app objection, violating Arts. 5, 12, 21 GDPR	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 12 Art. 21	€5,508,000
2026-09-15	ANSPDCP (Romania) - Fine against Dormeo Home S.R.L	🇷🇴 ANSPDCP (Romania)	Art. 21	€10,517
2026-09-03	Banco Bilbao Vizcaya Argentaria S.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 21 Art. 24	€5,508,000
2026-08-20	Garante per la protezione dei dati personali (Italy) - 10269624	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 61 Art. 6 Art. 7 Art. 123	€280,000
2026-08-12	Datatilsynet ordered Lab Pharma AS to erase influencer's personal data used after	🇳🇴 Datatilsynet (Norway)	Art. 61 Art. 6 Art. 61 Art. 17	€205,000
2026-07-24	AEPD (Spain) - PS/00421/2020	🇪🇸 AEPD (Spain)	Art. 21	€5,000
2026-07-17	CNIL (France) - SAN-2022-011	🇫🇷 CNIL (France)	Art. 12 Art. 14 Art. 15 Art. 21	€1,000,000
2026-07-03	Garante per la protezione dei dati personali (Italy) - 487/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 52 Art. 5	€158,000
2026-06-16	Dormeo Home SRL Insufficient fulfilment of data subjects rights	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 21	€1,000
2026-05-28	Action Fit di Milano Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 21	€3,930
2026-02-03	Alliance for the Union of Romanians (AUR) Party Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17 Art. 21	€1,000
2025-11-27	Verisure Italy s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 7 Art. 12 Art. 13	€400,000
2025-11-27	Verisure Italy s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 7 Art. 12 Art. 13	€400,000
2025-11-10	Whitedecor SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 7 Art. 12 Art. 15	€2,000
2025-11-10	Whitedecor SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 7 Art. 12 Art. 15	€2,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000

1–25 of 131 next →