Skip to content

Article 58 GDPR — enforcement

Cited in 214 decisions · €5.6M total fines · median €3,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (89)

Date ↓ Company / party Authority Articles Fine
2026-09-17 Commissioner (Cyprus) - Online Platform “Agora” 🇨🇾 Commissioner (Cyprus) Art. 31Art. 35Art. 36Art. 582 €6,000
2026-09-16 AEPD sanctions Iberdrola Clientes for improper identity verification and unauthorized 🇪🇸 AEPD (Spain) Art. 24Art. 32Art. 321Art. 582 €1,000,000
2026-09-16 AEPD fines El Español for publishing video of minor assailant without anonymization 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 52Art. 25 €20,000
2026-09-16 Austrian DSB reprimands editor for failing to redact accused's name in social media posts 🇦🇹 DSB (Austria) Art. 51Art. 5Art. 85Art. 10 —
2026-09-01 UODO fines controller PLN 31,507 for failing to provide information under Art. 58(1) GDPR 🇵🇱 UODO (Poland) Art. 58 €7,200
2026-08-19 HDPA: Hellenic Open University found to have met breach notification duties after 🇬🇷 HDPA (Greece) Art. 32Art. 33Art. 34Art. 582 —
2026-07-24 HDPA (Greece) - 33/2020 🇬🇷 HDPA (Greece) Art. 47Art. 4Art. 5Art. 12 €2,000
2026-07-16 AEPD (Spain) - PS-00020-2025 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 35Art. 582 €200,000
2026-07-16 Garante per la protezione dei dati personali (Italy) - 10192784 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 1Art. 51Art. 5Art. 51 €16,000
2026-07-16 AEPD (Spain) - EXP202102529 🇪🇸 AEPD (Spain) Art. 415Art. 4Art. 51Art. 5 —
2026-06-01 UODO fines controller for refusing to cooperate and provide information in two data 🇵🇱 UODO (Poland) Art. 31Art. 581Art. 58Art. 581 —
2026-05-22 Private individual
Insufficient cooperation with supervisory authority
🇵🇱 Polish National Personal Data Protection Office (UODO) Art. 58Art. 83 €6,292
2026-04-28 GATIGOS, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2026-04-28 RESIDENCIAL ETXE-LAN, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €1,800
2026-04-16 AKI (Estonia) - No. 2.1-1/24/397-890-38 🇪🇪 AKI (Estonia) Art. 47Art. 4Art. 411Art. 51 —
2026-03-13 SERVICIOS INMOBILIARIOS Y GESTIÓN RCL MADRID, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €600
2026-03-13 Housing Association
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €450
2026-03-09 AEPD: Ramona Films failed to comply with Article 58(2) order to provide processor 🇪🇸 AEPD (Spain) Art. 283Art. 28Art. 582Art. 58 €60,000
2026-03-05 Altex Romania S.R.L.
Insufficient cooperation with supervisory authority
🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 58 €8,000
2026-02-26 Ciemme S.r.l.s.
Insufficient cooperation with supervisory authority
🇮🇹 Italian Data Protection Authority (Garante) Art. 58 €1,000
2026-02-05 Tensa Art Design S.A
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 58Art. 83 €20,000
2026-01-30 Natural Person
Non-compliance with general data processing principles
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 9Art. 10 €10,000
2026-01-16 Garante per la protezione dei dati personali (Italy) - 10214411 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 61Art. 6 €1,500
2026-01-09 DSB (Austria) - DSB-D124.2437/25 🇦🇹 DSB (Austria) Art. 2Art. 41Art. 4Art. 42 —
2026-01-07 Austrian media company fined €6,820 for failing to comply with order to fix cookie banner 🇦🇹 Datenschutzbehörde Art. 58 €6,820