Article 24 GDPR — enforcement

Cited in 131 decisions · €896.5M total fines · median €25,500 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (52)

Date ↓	Company / party	Authority	Articles	Fine
2020-07-13	Wind Tre S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 24	€16,700,000
2020-01-24	Accounting firm Insufficient technical and organisational measures to ensure information security	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 24 Art. 32	€1,450
2020-01-01	LITHUANIA DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 13 Art. 24 Art. 35	€8,000
2020-01-01	Private healthcare provider Insufficient technical and organisational measures to ensure information security	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 24 Art. 32	€387
2019-12-11	Unknown Company Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13 Art. 24	€1,430
2019-10-15	Unknown Company Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13 Art. 24	€2,860

← previous 126–131 of 131