Article 4 GDPR — enforcement

Cited in 26 decisions · €3.1M total fines · median €6,600 · top authority: 🇦🇹DSB (Austria) (8)

Date ↓	Company / party	Authority	Articles	Fine
2026-09-16	AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber	🇪🇸 AEPD (Spain)	Art. 411 Art. 4 Art. 52 Art. 5	€10,000
2026-08-18	Austrian DSB: Employee who shared customer's phone number acted as GDPR controller	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 47	€1,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-24	ANSPDCP (Romania) - Fine against There's an AI for that S.R.L	🇷🇴 ANSPDCP (Romania)	Art. 4	€30
2026-07-20	Garante per la protezione dei dati personali (Italy) - 10254256	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 49 Art. 4 Art. 410 Art. 415	€12,000
2026-07-16	AEPD (Spain) - EXP202102529	🇪🇸 AEPD (Spain)	Art. 415 Art. 4 Art. 51 Art. 5	—
2026-07-09	ANSPDCP (Romania) - Fine against Ascendex Technology SRL	🇷🇴 ANSPDCP (Romania)	Art. 423 Art. 4 Art. 121 Art. 12	€57,839
2026-06-18	Garante per la protezione dei dati personali (Italy) - 462/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 21 Art. 2 Art. 41 Art. 4	€6,600
2026-05-28	EDPB - Binding Decision 1/2026	🇪🇺 EDPB	Art. 424 Art. 4 Art. 571 Art. 57	—
2026-04-16	AKI (Estonia) - No. 2.1-1/24/397-890-38	🇪🇪 AKI (Estonia)	Art. 47 Art. 4 Art. 411 Art. 51	—
2026-02-26	S.M. Trattamento Acqua di XX Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 4 Art. 5 Art. 6 Art. 7	€30,000
2026-02-12	Depurazione Acqua S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 4 Art. 5 Art. 6 Art. 7	€15,000
2026-01-12	DSB (Austria) - 2026-0.016.479	🇦🇹 DSB (Austria)	Art. 415 Art. 4 Art. 51 Art. 5	€200
2026-01-09	DSB (Austria) - DSB-D124.2437/25	🇦🇹 DSB (Austria)	Art. 2 Art. 41 Art. 4 Art. 42	—
2025-11-21	DSB: No processor access violation under Art. 15 GDPR when controller deleted data	🇦🇹 DSB (Austria)	Art. 47 Art. 4 Art. 48 Art. 410	—
2024-10-11	APD/GBA (Belgium) - 131/2024	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 51 Art. 5	—
2023-11-24	APD/GBA (Belgium) - 159/2023	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 61 Art. 6	—
2022-12-29	CNIL (France) - SAN-2022-026	🇫🇷 CNIL (France)	Art. 82 Art. 5 Art. 4	€3,000,000
2022-05-25	Belgian DPA: Roularta Media Group violated cookie consent rules	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 51 Art. 5	€50
2022-01-21	APD/GBA (Belgium) - 11/2022	🇧🇪 APD/GBA (Belgium)	Art. 41 Art. 4 Art. 411 Art. 51	—
2021-08-05	DSB (Austria) - 2021-0.518.795	🇦🇹 DSB (Austria)	Art. 42 Art. 4 Art. 47 Art. 410	€600
2020-11-19	DSB Austria: Restaurant contact-tracing data collected for COVID-19 qualifies as health	🇦🇹 DSB (Austria)	Art. 415 Art. 4 Art. 51 Art. 5	—
2020-11-05	Austrian DSB: Controller's use of social security number for statutory financial aid was	🇦🇹 DSB (Austria)	Art. 415 Art. 4 Art. 91 Art. 9	—
2020-07-30	HDPA 23/2020: Complaint against HEDNO S.A. for denial of employment certificate	🇬🇷 HDPA (Greece)	Art. 41 Art. 4 Art. 47 Art. 5	—
2019-12-18	DSB (Austria) - D123.768/0004-DSB/2019	🇦🇹 DSB (Austria)	Art. 44 Art. 4 Art. 47 Art. 851	—

1–25 of 26 next →