Article 32 GDPR — enforcement
Cited in 762 decisions · €504.3M total fines · median €15,600 · top authority: 🇪🇺Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) (175)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2019-04-29 | Oslo Municipal Education Department Insufficient technical and organisational measures to ensure information security | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 32 | €120,000 |
| 2019-04-17 | Italian political party Movimento 5 Stelle Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 32 | €50,000 |
| 2019-04-12 | Company in the financial sector Insufficient technical and organisational measures to ensure information security | 🇪🇺 Data Protection Authority of Baden-Wuerttemberg | Art. 5Art. 32 | €80,000 |
| 2019-03-01 | Bergen Municipality Insufficient technical and organisational measures to ensure information security | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 32 | €170,000 |
| 2019-02-28 | CZECH REPUBLIC DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 32 | €582 |
| 2019-02-18 | Lands Authority Insufficient technical and organisational measures to ensure information security | 🇪🇺 Data Protection Commissioner of Malta | Art. 5Art. 32 | €5,000 |
| 2019-02-04 | Credit brokerage Insufficient technical and organisational measures to ensure information security | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 32 | €1,165 |
| 2019-01-01 | GERMANY DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 Data Protection Authority of Baden-Wuerttemberg | Art. 32 | €80,000 |
| 2019-01-01 | VODAFONE ONO, S.A.U. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 32 | €48,000 |
| 2019-01-01 | Vodafone España, S.A.U. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €30,000 |
| 2018-11-21 | Knuddels.de Insufficient technical and organisational measures to ensure information security | 🇪🇺 Data Protection Authority of Baden-Wuerttemberg | Art. 32 | €20,000 |
| 2018-07-17 | Public Hospital Insufficient technical and organisational measures to ensure information security | 🇪🇺 Portuguese Data Protection Authority (CNPD) | Art. 5Art. 32 | €400,000 |
← previous 751–762 of 762