Article 5 GDPR — enforcement

Cited in 1,784 decisions · €2.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)

Read Article 5 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-02-12	Comune di Coccaglio Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€6,000
2026-02-12	Unleadmited S.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 24	€5,000
2026-02-12	Comune di Mazara del Vallo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€4,000
2026-02-12	Order of Physicians, Surgeons and Dentists of the Province of Macerata Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 88	€2,000
2026-02-12	Comune di Monterotondo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-02-12	Comune di Velletri Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€2,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25	€1,500
2026-02-12	Sole Trader Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€1,000
2026-02-11	AEPD (Spain) - EXP202306354 (PS/00312/2024)	🇪🇸 AEPD (Spain)	Art. 51 Art. 5 Art. 61 Art. 6	€150,000
2026-02-05	DPD Polska sp. z o.o. Insufficient data processing agreement	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 24 Art. 29 Art. 32	€2,682,000
2026-02-05	Obuda University Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9	€4,200
2026-01-30	Natural Person Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 9 Art. 10	€10,000
2026-01-30	Hungarian University of Agriculture and Life Sciences Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13	€4,200
2026-01-29	Università Telematica e-Campus Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 25	€50,000
2026-01-29	Istituto San Giuseppe La Salle di Milano Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2026-01-29	Ministero della Cultura Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2026-01-29	Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€10,000
2026-01-29	Dr. Paolo Montemurro Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€5,000
2026-01-29	Federazione Nazionale Ordini Professioni Infermieristiche (FNOPI) Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2026-01-19	Austrian DSB: Marketing agency violated GDPR by recording phone interviews without valid	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 131 Art. 13	€25,500
2026-01-19	Continental Automotive Products SRL Insufficient technical and organisational measures to ensure information security	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 32	€15,000
2026-01-19	Continental Automotive Products SRL Insufficient technical and organisational measures to ensure information security	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 32	€15,000
2026-01-19	Dental Clinic Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€1,200
2026-01-16	Italian DPA fines butcher €1,500 for unlawful video surveillance lacking information signs	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 61 Art. 6	€1,500

← previous 101–125 of 1,784 next →