Article 34 GDPR — enforcement

Cited in 60 decisions · €83.1M total fines · median €26,350 · top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (24)

Read Article 34 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2021-01-05	POLAND DPA: Insufficient fulfilment of data breach notification obligations Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 34 Art. 58	€19,000
2021-01-05	Śląski Uniwersytet Medyczny (Medical University of Silesia) Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€5,500
2020-12-28	Towarzystwo Ubezpieczeń i Reasekuracji WARTA S.A. Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€18,930
2020-12-16	Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) Insufficient technical and organisational measures to ensure information security	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 25 Art. 32 Art. 34	€55,400
2020-12-09	TUiR Warta S.A. Insufficient fulfilment of data breach notification obligations	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 33 Art. 34	€18,850
2020-06-30	Lejre Municipality Non-compliance with general data processing principles	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 5 Art. 6 Art. 33 Art. 34	€6,700
2020-04-29	National Government Service Centre (NGSC) Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 33 Art. 34	€18,700
2019-04-05	Hungarian political party Insufficient fulfilment of data breach notification obligations	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 33 Art. 34	€34,375
2019-01-01	Hamburger Verkehrsverbund GmbH (HVV GmbH) Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Hamburg	Art. 33 Art. 34	€20,000
2018-01-01	GERMANY DPA: Insufficient fulfilment of data breach notification obligations Insufficient fulfilment of data breach notification obligations	🇪🇺 Data Protection Authority of Hamburg	Art. 33 Art. 34	€20,000

← previous 51–60 of 60