Article 30 GDPR — enforcement

Cited in 40 decisions · €10.8M total fines · median €29,750 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (14)

Read Article 30 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2022-02-02	IAB Europe Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€0
2022-01-27	EU DisinfoLab Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 9 Art. 12	€2,800
2022-01-26	Slane Credit Union Ltd. Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 24 Art. 28 Art. 30	€5,000
2021-12-16	Enel Energia S.p.A Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€0
2021-09-15	Société nouvelle de l’annuaire français Insufficient fulfilment of data subjects rights	🇪🇺 French Data Protection Authority (CNIL)	Art. 16 Art. 17 Art. 30 Art. 31	€3,000
2021-07-22	Deliveroo Italy s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 22 Art. 25	€2,500,000
2021-07-22	Atac s.p.a. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30 Art. 32	€400,000
2021-07-22	Flowbird Italia s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30	€30,000
2021-06-21	UAB VS FITNESS Non-compliance with general data processing principles	🇪🇺 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 9 Art. 13 Art. 30	€20,000
2021-06-10	Foodinho s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 22 Art. 25	€2,600,000
2021-03-25	OneDirect Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 7 Art. 30 Art. 31	€30,000
2020-12-17	Azienda Unità Sanitaria Locale Toscana Sud Est Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 14 Art. 28	€100,000
2020-11-13	BELGIUM DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€1,500
2020-09-25	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 13 Art. 28 Art. 30	€400
2019-10-04	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 12 Art. 30	€2,000

← previous 26–40 of 40