Article 34 GDPR — enforcement

Cited in 62 decisions · €83.5M total fines · median €28,850 · top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (24)

Read Article 34 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2021-03-24	Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) Insufficient technical and organisational measures to ensure information security	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 32 Art. 33 Art. 34	€27,700
2021-01-22	BELGIUM DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 24 Art. 32 Art. 33	€25,000
2021-01-05	POLAND DPA: Insufficient fulfilment of data breach notification obligations Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 34 Art. 58	€19,000
2021-01-05	Śląski Uniwersytet Medyczny (Medical University of Silesia) Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€5,500
2020-12-28	Towarzystwo Ubezpieczeń i Reasekuracji WARTA S.A. Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€18,930
2020-12-16	Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) Insufficient technical and organisational measures to ensure information security	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 25 Art. 32 Art. 34	€55,400
2020-12-09	TUiR Warta S.A. Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€18,850
2020-06-30	Lejre Municipality Non-compliance with general data processing principles	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 5 Art. 6 Art. 33 Art. 34	€6,700
2020-04-29	National Government Service Centre (NGSC) Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 33 Art. 34	€18,700
2019-04-05	Hungarian political party Insufficient fulfilment of data breach notification obligations	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 33 Art. 34	€34,375
2019-01-01	Hamburger Verkehrsverbund GmbH (HVV GmbH) Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Hamburg	Art. 33 Art. 34	€20,000
2018-01-01	GERMANY DPA: Insufficient fulfilment of data breach notification obligations Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Hamburg	Art. 33 Art. 34	€20,000

← previous 51–62 of 62