Article 39 GDPR — enforcement
Cited in 7 decisions · €113.3K total fines · median €15,400 · top authority: 🇪🇺National Commission for Data Protection (CNPD) (6)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-02-26 | Flamel S.r.l. Non-compliance with general data processing principles | 🇮🇹 Italian Data Protection Authority (Garante) | Art. 8Art. 11Art. 25Art. 39 | €15,000 |
| 2021-10-27 | Company Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 37Art. 38Art. 39 | €18,700 |
| 2021-10-27 | LUXEMBOURG DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 38Art. 39 | €15,400 |
| 2021-10-13 | LUXEMBOURG DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 37Art. 38Art. 39 | €18,000 |
| 2021-10-13 | LUXEMBOURG DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 38Art. 39 | €13,200 |
| 2021-06-11 | LUXEMBOURG DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 38Art. 39 | €15,000 |
| 2021-05-31 | LUXEMBOURG DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 38Art. 39 | €18,000 |