Article 30 GDPR — enforcement

Cited in 40 decisions · €10.8M total fines · median €29,750 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (14)

Read Article 30 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-02-26	Depac Società Cooperativa Sociale a r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 30	€15,000
2025-12-11	MOBIUS SOLUTIONS LTD Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 28 Art. 29 Art. 30	€1,000,000
2025-12-11	MOBIUS SOLUTIONS LTD Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 28 Art. 29 Art. 30	€1,000,000
2025-12-10	University of Limerick Insufficient technical and organisational measures to ensure information security	🇮🇪 Data Protection Authority of Ireland	Art. 5 Art. 30 Art. 32 Art. 33	€98,000
2025-04-30	Company Non-compliance with general data processing principles	🇪🇺 National Commission for Data Protection (CNPD)	Art. 30	€7,000
2025-04-30	Company Non-compliance with general data processing principles	🇪🇺 National Commission for Data Protection (CNPD)	Art. 30	€7,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-03-24	Company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 5 Art. 6 Art. 12 Art. 14	€40,000
2025-01-16	Realmaps S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2024-12-18	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 38 Art. 30 Art. 35	€135,600
2024-11-13	Sligo County Council Non-compliance with general data processing principles	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 13 Art. 24 Art. 25	€29,500
2024-01-16	Black Tiger Belgium Insufficient fulfilment of information obligations	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 14	€174,640
2023-04-13	Mas s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€500,000
2023-04-13	Mas s.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€200,000
2023-03-24	ALI MARKET Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 13 Art. 30	€360
2023-01-09	Praktiškas UAB Insufficient legal basis for data processing	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 9 Art. 13 Art. 30	€6,000
2022-11-10	Sportitalia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 30	€20,000
2022-11-03	Burwebs S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 12 Art. 13 Art. 25	€75,000
2022-10-31	TECHPUMP SOLUTIONS S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 8 Art. 12	€525,000
2022-10-20	Comune di Salento Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2022-09-09	School Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2022-08-30	Bazar Pekin Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 13 Art. 30	€1,700
2022-07-26	Volkswagen Insufficient fulfilment of information obligations	🇪🇺 Data Protection Authority of Niedersachsen	Art. 13 Art. 28 Art. 30 Art. 35	€1,100,000
2022-07-21	Clio S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30 Art. 2	€10,000
2022-04-07	Azienda ospedaliera di Perugia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 14 Art. 25	€40,000

1–25 of 40 next →