Article 5 GDPR — enforcement

Cited in 1,886 decisions · €202.4B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)

Read Article 5 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-03	Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2026-09-02	AEPD: Canals City Council breached Art. 5(1)(f) GDPR by discarding exam papers unshredded	🇪🇸 AEPD (Spain)	Art. 51 Art. 5	—
2026-09-01	Slovenian DPA fines controller €5,320 for leaving employee personal data documents	🇸🇮 IP (Slovenia)	Art. 51 Art. 5 Art. 32	€5,320
2026-08-26	Italian DPA: Il Fatto Quotidiano must erase data subject's personal data from cable car	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 83	€23,750
2026-08-25	HDPA orders TEIRESIAS S.A. to ensure data accuracy under Art. 5(1)(d) GDPR	🇬🇷 HDPA (Greece)	Art. 51 Art. 5	—
2026-08-19	Garante per la protezione dei dati personali (Italy) - 10266250	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-08-18	ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.	🇷🇴 ANSPDCP (Romania)	Art. 51 Art. 5 Art. 9 Art. 324	€285,395
2026-08-18	Austrian DSB: Employee who shared customer's phone number acted as GDPR controller	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 47	€1,000
2026-08-18	Garante per la protezione dei dati personali (Italy) - 10273026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 851	—
2026-08-07	Finnish DPA finds 12-year retention of rental applicant data violates minimisation	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 51 Art. 5 Art. 51 Art. 251	—
2026-08-06	AMATO BESTSELLER S.R.L Non-compliance with general data processing principles	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 32 Art. 14 Art. 5 Art. 9	€45,000
2026-08-04	Finnish DPA examines anti-doping organization's GDPR compliance over public suspension	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 22 Art. 2 Art. 51 Art. 5	—
2026-07-28	HDPA (Greece) - 15/2026	🇬🇷 HDPA (Greece)	Art. 51 Art. 5 Art. 283 Art. 28	€200,000,150,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-23	Garante per la protezione dei dati personali (Italy) - 556/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 52 Art. 5 Art. 24 Art. 28	€9,516,000
2026-07-23	TIM S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 15	€9,516,000
2026-07-23	Emiglia-Romagna Regional Employment Agency Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€30,000
2026-07-23	Bologna University Hospital IRCCS Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€10,000
2026-07-23	Monza and Brianza Local Education Authority Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€10,000
2026-07-23	Municipality of Terralba Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 24 Art. 25	€8,000
2026-07-23	Top Secrert Investigazioni e sicurezza s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€6,500
2026-07-23	Ancel Keys Comprehensive School Castelnuovo Cilento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-07-23	Garante per la protezione dei dati personali (Italy) - 577/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 25	—
2026-07-22	Finnish DPA: requesting address, ID number and strong authentication for access request	🇫🇮 Tietosuojavaltuutetun toimisto (Finland)	Art. 51 Art. 5 Art. 122 Art. 12	—
2026-07-20	Garante per la protezione dei dati personali (Italy) - 10254256	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 49 Art. 4 Art. 410 Art. 415	€12,000

← previous 26–50 of 1,886 next →