Skip to content

Article 25 GDPR — enforcement

Cited in 206 decisions · €920.8M total fines · median €50,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (69)

Date ↓ Company / party Authority Articles Fine
2019-10-15 Unknown Company
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 13Art. 24 €2,860
2019-10-07 Telecommunication Service Provider
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 25 €200,000
2019-10-07 Telecommunication Service Provider
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 21Art. 25 €200,000
2019-09-03 Telecommunication service provide
Insufficient legal basis for data processing
🇪🇺 Commission for Personal Data Protection (KZLD) Art. 6Art. 25 €5,113
2019-09-03 Telecommunication service provide
Insufficient legal basis for data processing
🇪🇺 Commission for Personal Data Protection (KZLD) Art. 6Art. 25 €1,022
2019-06-27 UNICREDIT BANK SA
Insufficient technical and organisational measures to ensure information security
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 25Art. 5 €130,000