Skip to content

Article 31 GDPR — enforcement

Cited in 77 decisions · €23.7M total fines · median €4,600 · top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (18)

Date ↓ Company / party Authority Articles Fine
2021-12-01 Pactum Poland Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,000
2021-09-17 Mediterranean Hospital of Cyprus
Insufficient cooperation with supervisory authority
🇪🇺 Cypriot Data Protection Commissioner Art. 31Art. 58 €10,000
2021-09-15 Société nouvelle de l’annuaire français
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 16Art. 17Art. 30Art. 31 €3,000
2021-06-09 S.C. Dreamtime Call S.R.L.
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 31Art. 58 €2,000
2021-06-09 La Santrade S.R.L.
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 31Art. 58 €2,000
2021-04-27 PNP S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €5,050
2021-03-25 OneDirect Srl
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 7Art. 30Art. 31 €30,000
2021-03-19 Funeda Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,900
2021-03-03 Cypriot Real Estate Registration Authority
Insufficient fulfilment of information obligations
🇪🇺 Cypriot Data Protection Commissioner Art. 12Art. 15Art. 31Art. 58 €10,000
2021-02-12 AUSTRIA DPA: Insufficient cooperation with supervisory authority
Insufficient cooperation with supervisory authority
🇪🇺 Austrian Data Protection Authority (dsb) Art. 31 €3,000
2021-01-15 Anwara Sp. z.o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,600
2021-01-01 SLOVAKIA DPA: Insufficient cooperation with supervisory authority
Insufficient cooperation with supervisory authority
🇪🇺 Slovak Data Protection Office Art. 31 €500
2020-12-11 Cosmetic Medical Limited
Insufficient cooperation with supervisory authority
🇪🇺 Information Commissioner of Isle of Man Art. 31 €3,250
2020-12-09 Smart Cities Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €2,850
2020-11-06 Xfera Moviles S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 31 €20,000
2020-10-01 Megareduceri TV S.R.L.
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 31Art. 58 €3,000
2020-10-01 Asociația de proprietari Militari R
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 31Art. 58 €2,000
2020-07-15 Office for geodesy and cartography
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €22,300
2020-07-10 East Power Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €3,400
2020-07-02 Xfera Moviles S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 31Art. 58 €5,000
2020-06-16 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 17Art. 21Art. 31 €1,000
2020-06-03 Entrepreneur running a non-public nursery and pre-school
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €1,168
2020-04-28 Proximus SA
Insufficient involvement of data protection officer
🇪🇺 Belgian Data Protection Authority (APD) Art. 31Art. 58Art. 37 €50,000
2020-03-09 Vis Consulting Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,400
2019-11-21 Futura Internationale
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 5Art. 6Art. 13Art. 14 €500,000