Article 21 GDPR — enforcement

Cited in 131 decisions · €101.4M total fines · median €9,850 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (38)

Read Article 21 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Versilmagra Immobiliare di Robertelli Davide & C. S.a.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000
2025-04-29	Versilmagra Immobiliare di Robertelli Davide & C. S.a.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000
2025-04-24	Real Estate Agency Insufficient cooperation with supervisory authority	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 21	€6,000
2025-04-24	Real Estate Agency Insufficient cooperation with supervisory authority	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 17 Art. 21	€6,000
2025-04-14	Office Nova Concept SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17 Art. 21	€1,000
2025-04-14	Office Nova Concept SRL Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 12 Art. 15 Art. 17 Art. 21	€1,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-03-13	Interflora Italia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 15	€40,000
2025-01-16	Realmaps S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2024-06-20	Fastweb S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€1,000,000
2024-05-30	Corint Logistic SRL. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 17 Art. 21	€2,000
2024-02-22	Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2024-01-23	ROUNDED TECHNOLOGIES, S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 21	€7,500
2023-12-22	Candidate for parliamentary elections Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 21	—
2023-10-17	H&M Hennes & Mauritz GBC AB Insufficient fulfilment of data subjects rights	🇪🇺 Data Protection Authority of Sweden	Art. 12 Art. 21	€30,000
2023-10-12	Scionti Selezioni Superiori S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€70,000
2023-09-18	NN Asigurări de Viață S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 21	€1,000
2023-07-18	Università Telematica E-Campus Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€75,000
2023-07-18	Compara Facile S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2023-06-07	CONCENTRA CENTRAL DE COMPRAS Y SERVICIOS S.L. Insufficient fulfilment of data subjects rights	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 21	€1,200
2023-05-29	NOVA TELECOMMUNICATIONS & MEDIA ΜΟΝΟΠΡΟΣΩΠΗ Α.Ε., Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 15 Art. 21 Art. 25	€150,000
2023-05-17	Grizzaffi Management Srl Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 17 Art. 21	€10,000

← previous 26–50 of 131 next →