Article 31 GDPR — enforcement

Cited in 83 decisions · €24.0M total fines · median €4,750 · top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (18)

Read Article 31 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-08-12	Datatilsynet ordered Lab Pharma AS to erase influencer's personal data used after	🇳🇴 Datatilsynet (Norway)	Art. 61 Art. 6 Art. 61 Art. 17	€205,000
2026-08-06	Leontinoi Società Cooperativa Sociale Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15 Art. 31	€1,000
2026-07-17	APDCAT sanctions Madremanya City Council for inadequate redaction of sensitive data in	🇪🇸 APDCAT (Catalonia)	Art. 51 Art. 5 Art. 51 Art. 31	—
2026-06-12	Market-In Non-compliance with general data processing principles	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€95,000
2026-06-01	UODO fines controller for refusing to cooperate and provide information in two data	🇵🇱 UODO (Poland)	Art. 31 Art. 581 Art. 58 Art. 581	—
2026-04-28	Non-Profit Foundation Insufficient cooperation with supervisory authority	🇧🇪 Belgian Data Protection Authority (APD)	Art. 31	€1,000
2026-01-09	DSB (Austria) - DSB-D124.2437/25	🇦🇹 DSB (Austria)	Art. 2 Art. 41 Art. 4 Art. 42	—
2025-12-31	I Mathisi Insufficient fulfilment of data subjects rights	🇬🇷 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 15 Art. 31	€6,000
2025-08-13	Sole Trader Insufficient cooperation with supervisory authority	🇪🇺 Slovenian Supervisory Authority (Informacijski pooblaščenec)	Art. 31	€500
2025-07-22	HEP-Toplinarstvo Insufficient technical and organisational measures to ensure information security	🇭🇷 Croatian Data Protection Authority (azop)	Art. 31 Art. 32	€320,000
2025-07-11	PAVLOS BIKOS SOLE PROPRIETORSHIP DENTAL PRIVATE CAPITAL COMPANY Insufficient cooperation with supervisory authority	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 31	€2,000
2025-07-11	PAVLOS BIKOS SOLE PROPRIETORSHIP DENTAL PRIVATE CAPITAL COMPANY Insufficient cooperation with supervisory authority	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 31	€2,000
2025-07-04	Zougla TZI-AP Anonymous Mass Media Company Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 31	€3,000
2025-07-04	Zougla TZI-AP Anonymous Mass Media Company Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 31	€3,000
2025-06-24	Shield of David - K.I.D.A.F. Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€10,000
2025-06-24	Shield of David - K.I.D.A.F. Non-compliance with general data processing principles	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 12 Art. 13 Art. 15	€10,000
2025-06-03	Car Park Management Company Insufficient cooperation with supervisory authority	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 31	€16,000
2025-06-03	Car Park Management Company Insufficient cooperation with supervisory authority	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 31	€16,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-29	Energia Verde S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2024-09-23	Attorney Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 12 Art. 31	€1,400
2024-09-04	Senira Limited Insufficient cooperation with supervisory authority	🇪🇺 Cypriot Data Protection Commissioner	Art. 31	€3,000
2024-08-30	POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 31 Art. 58	€4,500

1–25 of 83 next →