Article 21 GDPR — enforcement
Cited in 131 decisions · €101.4M total fines · median €9,850 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (38)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-01-01 | Company Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Niedersachsen | Art. 15Art. 21 | €50,000 |
| 2021-12-28 | FREE MOBILE Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 15Art. 21Art. 25 | €300,000 |
| 2021-12-16 | Enel Energia S.p.A Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €0 |
| 2021-12-08 | BELGIUM DPA: Insufficient fulfilment of data subjects rights Insufficient fulfilment of data subjects rights | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 12Art. 14Art. 15Art. 17 | €10,000 |
| 2021-12-01 | INTRODUCTION BUSINESS CAPITAL MEDIA, S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 48Art. 21Art. 23 | €5,000 |
| 2021-11-30 | ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17Art. 21 | €5,000 |
| 2021-11-30 | ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17Art. 21 | €5,000 |
| 2021-11-29 | TIGERS MARKET, S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 48Art. 21Art. 23 | €4,000 |
| 2021-11-25 | B&T S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €400,000 |
| 2021-11-25 | Aimon Srl Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 21 | €200,000 |
| 2021-10-19 | Vodafone España, S.A.U. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 21 | €70,000 |
| 2021-10-14 | ΚΑΠΑ ΛΑΜΔΑ ΩΜΕΓΑ ΔΙΑΦΗΜΙΣΤΙΚΗ ΕΜΠΟΡΙΚΗ ΜΟΝΟΠΡΟΣΩΠΗ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 6Art. 12Art. 21 | €20,000 |
| 2021-10-04 | PREMIUMMEDIA ΠΑΡΑΓΩΓΗ ΟΠΤΙΚΟ-ΑΚΟΥΣΤΙΚΩΝ ΕΡΓΩΝ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΙΑ Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 21Art. 25 | €5,000 |
| 2021-09-16 | Sky Italia S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €3,296,326 |
| 2021-09-07 | Vodafone Ireland Limited Insufficient fulfilment of data subjects rights | 🇪🇺 Data Protection Authority of Ireland | Art. 21 | €1,400 |
| 2021-09-02 | Automecanica Jerez, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32Art. 21 | €4,000 |
| 2021-08-30 | Furnishyourspace S.L. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 12Art. 13 | €6,000 |
| 2021-07-29 | UNIVERSIDAD A DISTANCIA DE MADRID, S.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17Art. 21 | €3,000 |
| 2021-06-24 | Magazine publisher Insufficient legal basis for data processing | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 7Art. 12Art. 21 | €8,500 |
| 2021-06-22 | NORWAY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 6Art. 13Art. 17 | €24,800 |
| 2021-05-13 | Telekom Romania Communications SA Insufficient fulfilment of data subjects rights | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 6Art. 21 | €2,000 |
| 2021-05-12 | KARIERA A.E. Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 17Art. 21Art. 25 | €5,000 |
| 2021-04-27 | Anytime Fitness Iberia S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17Art. 21 | €15,000 |
| 2021-04-27 | Pagamastarde S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17Art. 21 | €3,000 |
| 2021-04-06 | Promotech Digital S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 21 | €2,400 |