Article 5 GDPR — enforcement
Cited in 1,899 decisions · €2.4B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)
Read Article 5 GDPR → · Compare by country →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-10-27 | Car importer Insufficient legal basis for data processing | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 6Art. 12Art. 13 | €13,500 |
| 2021-10-26 | Bank Non-compliance with general data processing principles | 🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD) | Art. 5 | €380 |
| 2021-10-21 | Glove Technology SRL Insufficient legal basis for data processing | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 5Art. 6 | €5,000 |
| 2021-10-18 | Østre Toten municipality Insufficient technical and organisational measures to ensure information security | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 32 | €412,000 |
| 2021-10-18 | HIV Scotland Insufficient technical and organisational measures to ensure information security | 🇪🇺 Information Commissioner (ICO) | Art. 5Art. 32 | €11,800 |
| 2021-10-14 | Health Protection Agency of Sardinia (ATS) Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €8,000 |
| 2021-10-13 | Vodafone España, S.A.U. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €40,000 |
| 2021-10-06 | LUXEMBOURG DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 5Art. 13 | €5,300 |
| 2021-10-06 | Facebook Ireland Limited Insufficient fulfilment of information obligations | 🇪🇺 Data Protection Authority of Ireland | Art. 5Art. 12Art. 13 | — |
| 2021-10-05 | CLUB DEPORTIVO SANSUEÑA, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 32 | €4,000 |
| 2021-10-04 | Store owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,000 |
| 2021-09-29 | Territorial Administration of the Government of Genoa Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €11,000 |
| 2021-09-29 | Physician Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €2,000 |
| 2021-09-28 | Bar owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €3,000 |
| 2021-09-27 | Ferde AS Non-compliance with general data processing principles | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 28Art. 32Art. 44 | €496,000 |
| 2021-09-21 | Istituto Comprensivo - IC Cosenza III “V. Negroni” Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €2,000 |
| 2021-09-20 | CEDICO, CENTRO DE DIAGNÓSTICO POR LA IMÁGEN, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €18,000 |
| 2021-09-16 | Sky Italia S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €3,296,326 |
| 2021-09-16 | Bocconi University Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 13 | €200,000 |
| 2021-09-16 | Ciechi Ardizzone Gioeni di Catania Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 35 | €5,000 |
| 2021-09-16 | La Prima S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 24Art. 25 | €5,000 |
| 2021-09-16 | Comune di Montalbano Jonico Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €5,000 |
| 2021-09-16 | Frigorifica Botana S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €4,000 |
| 2021-09-16 | Farpa s.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 88Art. 114 | €1,000 |
| 2021-09-04 | AMPUDIA DIAZ, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 13 | €1,500 |