Article 36 GDPR — enforcement

Cited in 7 decisions · €44.8K total fines · median €18,630 · top authority: 🇩🇰Datatilsynet (Denmark) (4)

Date ↓	Company / party	Authority	Articles	Fine
2026-09-02	Datatilsynet (Denmark) - 09-07-2026 (Lyngby Boldklub)	🇩🇰 Datatilsynet (Denmark)	Art. 91 Art. 9 Art. 92 Art. 35	—
2026-09-02	Datatilsynet authorises AC Horsens facial recognition at matches under conditions	🇩🇰 Datatilsynet (Denmark)	Art. 91 Art. 9 Art. 92 Art. 35	—
2026-09-01	Datatilsynet (Denmark) - 09-07-2026 (Lyngby Boldklub)	🇩🇰 Datatilsynet (Denmark)	Art. 91 Art. 9 Art. 92 Art. 35	—
2022-09-28	Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 4)	🇩🇰 Datatilsynet (Denmark)	Art. 283 Art. 28 Art. 36 Art. 361	—
2022-03-25	Danish National Genome Center Insufficient technical and organisational measures to ensure information security	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 36	€6,700
2020-11-25	Gnosjö Municipality Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 5 Art. 6 Art. 13 Art. 35	€19,500
2019-08-20	School in Skellefteå Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden	Art. 5 Art. 9 Art. 35 Art. 36	€18,630