Article 27 GDPR — enforcement
Cited in 19 decisions · €2.9M total fines · median €3,343 · top authority: 🇪🇺Croatian Data Protection Authority (azop) (12)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-07-03 | Italian DPA finds GDPR applies to US-based Character.AI service | 🇮🇹 Garante per la protezione dei dati personali (Italy) | Art. 32Art. 3Art. 52Art. 5 | €158,000 |
| 2025-12-03 | TIGER MEDIA INC. Insufficient legal basis for data processing | 🇪🇸 Spanish Data Protection Authority (aepd) | Art. 6Art. 27 | €72,000 |
| 2025-11-14 | AEPD sanctions Tiger Media Inc. for installing advertising cookies without user consent | 🇪🇸 AEPD (Spain) | Art. 61Art. 6Art. 27 | €72,000 |
| 2024-05-23 | Professional association Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 27Art. 2 | €3,500 |
| 2024-04-22 | CROATIA DPA: Insufficient fulfilment of information obligations Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27Art. 13 | — |
| 2022-12-08 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-08 | Jewelry manufacturer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Fish market Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,185 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-05 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,583 |
| 2022-12-05 | Betting place Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-11-25 | Company in the hospitality industry Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-11-25 | Betting place Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-10-06 | Alpha Exploration Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €2,000,000 |
| 2022-07-21 | Car dealership Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €4,000 |
| 2022-07-07 | Senseonics Inc. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 9 | €45,000 |
| 2020-12-20 | Locatefamily.com Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 27 | €525,000 |