Article 36 GDPR — enforcement

Cited in 3 decisions · €44.8K total fines · median €18,630 · top authority: 🇪🇺Danish Data Protection Authority (Datatilsynet) (1)

Date ↓	Company / party	Authority	Articles	Fine
2022-03-25	Danish National Genome Center Insufficient technical and organisational measures to ensure information security	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 36	€6,700
2020-11-25	Gnosjö Municipality Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 5 Art. 6 Art. 13 Art. 35	€19,500
2019-08-20	School in Skellefteå Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden	Art. 5 Art. 9 Art. 35 Art. 36	€18,630