Skip to content

Article 2 GDPR — enforcement

Cited in 70 decisions · €6.4M total fines · median €6,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (70)

Date ↓ Company / party Authority Articles Fine
2022-05-26 Università Agraria di Nettuno
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €4,000
2022-04-28 Istituto Nazionale Assicurazione Infortuni sul Lavoro
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 32 €50,000
2022-04-28 Italian Ministry of Defense
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 10 €10,000
2022-04-28 Comune di Monte Sant'Angelo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 17Art. 2 €3,000
2022-04-28 'Isabella Gonzaga' high school
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €2,500
2022-04-28 Comune di Partanna
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000
2022-04-28 Direzione Didattica Statale 1° Circolo-Eboli
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €1,500
2022-03-10 Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10Art. 2 €8,000
2022-03-10 Azienda sanitaria provinciale di Caltanissetta
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 15 €6,000
2022-02-10 Region of Tuscany
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €10,000
2022-02-10 Comune di Guidizzolo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000
2022-01-13 A.S.L. Napoli 1 Centro
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €1,000
2021-09-29 Territorial Administration of the Government of Genoa
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €11,000
2021-09-21 Istituto Comprensivo - IC Cosenza III “V. Negroni”
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €2,000
2021-09-16 Bocconi University
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €200,000
2021-09-16 Comune di Montalbano Jonico
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €5,000
2021-05-13 Synlab Med srl
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 2 €20,000
2021-04-29 Santa Ninfa municipality
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000
2021-03-25 Convitto Nazionale Statale 'Giordano Bruno' di Maddaloni (boarding school)
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €6,000
2021-01-27 City of Rome (Roma capitale)
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €10,000