Article 5 GDPR — enforcement
Cited in 1,716 decisions · €1.8B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-01-08 | notebooksbilliger.de Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Niedersachsen | Art. 5Art. 6 | €10,400,000 |
| 2021-01-07 | Gveik AS Insufficient legal basis for data processing | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 6 | €7,250 |
| 2021-01-06 | Lindstrand Trading AS Insufficient legal basis for data processing | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 6 | €9,700 |
| 2021-01-04 | Innovasjon Norge Insufficient legal basis for data processing | 🇪🇺 Norwegian Supervisory Authority (Datatilsynet) | Art. 5Art. 6 | €95,500 |
| 2021-01-04 | Vodafone España, S.A.U. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €54,000 |
| 2021-01-01 | Bank Insufficient technical and organisational measures to ensure information security | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 5Art. 32 | €4,000,000 |
| 2021-01-01 | SLOVAKIA DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles | 🇪🇺 Slovak Data Protection Office | Art. 5Art. 28 | €40,000 |
| 2021-01-01 | Electronics store Non-compliance with general data processing principles | 🇪🇺 Data Protection Authority of Niedersachsen | Art. 5Art. 17Art. 35 | €16,000 |
| 2021-01-01 | Private individual Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Hamburg | Art. 5Art. 6 | €5,000 |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Hessen | Art. 5Art. 6 | €1,800 |
| 2021-01-01 | Private individual Non-compliance with general data processing principles | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 5Art. 9 | €600 |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Hessen | Art. 5Art. 6 | €600 |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Hessen | Art. 5Art. 6 | €500 |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Hessen | Art. 5Art. 6 | €400 |
| 2021-01-01 | Restaurant Non-compliance with general data processing principles | 🇪🇺 Data Protection Authority of Hessen | Art. 5 | €170 |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Private individual Non-compliance with general data processing principles | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 5 | — |
| 2021-01-01 | Job center employee Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Attorney Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Medical clinic Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Job center employee Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |
| 2021-01-01 | Police officer Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Berlin | Art. 5Art. 6 | — |