Skip to content

Article 58 GDPR — enforcement

Cited in 203 decisions · €4.5M total fines · median €3,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (89)

Date ↓ Company / party Authority Articles Fine
2026-07-27 AEPD fines El Español for disclosing minor's identity in assault video 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 52Art. 25 €20,000
2026-07-24 HDPA (Greece) 33/2020 — Employee's access and erasure claims against the American College 🇬🇷 HDPA (Greece) Art. 47Art. 4Art. 5Art. 12 €2,000
2026-07-16 AEPD fines Alkora, S.A. for ransomware breach exposing 40,000 individuals' data 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 35Art. 582 €200,000
2026-07-16 Italian Garante: OPI of Pisa must remove residential addresses from public register 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 1Art. 51Art. 5Art. 51 €16,000
2026-07-16 AEPD investigates University of Navarra over student COVID-19 vaccination status requests 🇪🇸 AEPD (Spain) Art. 415Art. 4Art. 51Art. 5
2026-04-28 GATIGOS, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2026-04-28 RESIDENCIAL ETXE-LAN, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €1,800
2026-04-16 AKI (Estonia) - No. 2.1-1/24/397-890-38 🇪🇪 AKI (Estonia) Art. 47Art. 4Art. 411Art. 51
2026-03-13 SERVICIOS INMOBILIARIOS Y GESTIÓN RCL MADRID, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €600
2026-03-13 Housing Association
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €450
2026-03-05 Altex Romania S.R.L.
Insufficient cooperation with supervisory authority
🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 58 €8,000
2026-02-26 Ciemme S.r.l.s.
Insufficient cooperation with supervisory authority
🇮🇹 Italian Data Protection Authority (Garante) Art. 58 €1,000
2026-02-05 Tensa Art Design S.A
Insufficient cooperation with supervisory authority
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 58Art. 83 €20,000
2026-01-30 Natural Person
Non-compliance with general data processing principles
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 9Art. 10 €10,000
2026-01-16 Italian DPA fines butcher €1,500 for unlawful video surveillance lacking information signs 🇮🇹 Garante per la protezione dei dati personali (Italy) Art. 51Art. 5Art. 61Art. 6 €1,500
2025-12-30 POLAND DPA: Insufficient cooperation with supervisory authority
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 58 €960
2025-12-30 POLEN, Autoriteit voor Persoonsgegevens: Onvoldoende samenwerking met de toezichthoudende instantie.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 58 €960
2025-12-29 NAROBESA INV, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €1,600
2025-12-29 NAROBESA INV, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €1,600
2025-12-20 BLUE TEAM FLIGHT SCHOOL, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2025-12-20 BLUE TEAM FLIGHT SCHOOL, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2025-12-20 4USPORT INSTALACIONES DEPORTIVAS, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €600
2025-12-20 4USPORT INSTALACIONES DEPORTIVAS, S.L.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €600
2025-12-20 SPAIN DPA: Insufficient cooperation with supervisory authority
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €300
2025-12-20 SPAIN, DPA: Onvoldoende samenwerking met de toezichthoudende instantie.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €300