Article 31 GDPR — enforcement
Cited in 77 decisions · €23.7M total fines · median €4,600 · top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (18)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2024-01-01 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Data Protection Authority of Saxony | Art. 31 | €22,080 |
| 2024-01-01 | Freelancer Insufficient cooperation with supervisory authority | 🇪🇺 Data Protection Authority of Hessen | Art. 13Art. 31Art. 58 | €16,000 |
| 2023-12-21 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,300 |
| 2023-12-12 | AUSTRIA DPA: Insufficient fulfilment of data breach notification obligations Insufficient fulfilment of data breach notification obligations | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 31Art. 33 | €5,900 |
| 2023-12-12 | Kourou municipality Insufficient cooperation with supervisory authority | 🇪🇺 French Data Protection Authority (CNIL) | Art. 31Art. 37 | €5,000 |
| 2023-12-07 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €2,700 |
| 2023-09-18 | SAF LOGISTICS Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 9Art. 10Art. 31 | €200,000 |
| 2023-06-02 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,300 |
| 2023-05-31 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €2,300 |
| 2023-01-25 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,100 |
| 2023-01-13 | Intellexa SA Insufficient cooperation with supervisory authority | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 31 | €50,000 |
| 2023-01-01 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Data Protection Authority of Hessen | Art. 31 | €5,000 |
| 2022-12-21 | Hotel Insufficient legal basis for data processing | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 6Art. 12Art. 13 | €8,000 |
| 2022-12-19 | ΜΑΡΙΑ ΠΕΔΙΩΤΗ ΚΑΙ ΣΙΑ Ο.Ε. Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 12Art. 15Art. 31 | €7,000 |
| 2022-10-17 | Clearview Al Inc. Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 12Art. 15Art. 17 | €20,000,000 |
| 2022-09-25 | Health insurance provider Non-compliance with general data processing principles | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 12Art. 31 | €1,200 |
| 2022-08-31 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €1,450 |
| 2022-06-29 | Pediatric psychologist Insufficient cooperation with supervisory authority | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 31 | €3,000 |
| 2022-03-23 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €490 |
| 2022-02-02 | IAB Europe Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 5Art. 6Art. 9Art. 12 | €0 |
| 2022-01-01 | Cyprus Judo Federation Insufficient cooperation with supervisory authority | 🇪🇺 Cypriot Data Protection Commissioner | Art. 31 | €5,000 |
| 2022-01-01 | Oroklini Municipal Council Insufficient cooperation with supervisory authority | 🇪🇺 Cypriot Data Protection Commissioner | Art. 31 | €2,000 |
| 2022-01-01 | Physician Insufficient cooperation with supervisory authority | 🇪🇺 Cypriot Data Protection Commissioner | Art. 31 | €1,500 |
| 2022-01-01 | Website operator Insufficient fulfilment of data subjects rights | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 12Art. 31 | €1,300 |
| 2021-12-16 | Enel Energia S.p.A Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €0 |