Skip to content

Article 5 GDPR — enforcement

Cited in 1,790 decisions · €2.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)

Date ↓ Company / party Authority Articles Fine
2021-01-01 SLOVAKIA DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇺 Slovak Data Protection Office Art. 5Art. 28 €40,000
2021-01-01 Electronics store
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Niedersachsen Art. 5Art. 17Art. 35 €16,000
2021-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hamburg Art. 5Art. 6 €5,000
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €1,800
2021-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 9 €600
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €600
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €500
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €400
2021-01-01 Restaurant
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Hessen Art. 5 €170
2021-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5
2021-01-01 Private individual
Non-compliance with general data processing principles
🇪🇺 Data Protection Authority of Saxony Art. 5
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Medical clinic
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Attorney
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2020-12-30 ING Bank N.V. Amsterdam - Bucharest office
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6 €3,000
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 15Art. 5 €50,000
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 6Art. 5 €15,000
2020-12-21 Banco Bilbao Vizcaya Argentaria, S.A.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €36,000
2020-12-17 Roma Capitale (Rome Municipality)
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €500,000