Article 5 GDPR — enforcement

Cited in 1,893 decisions · €202.4B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)

Read Article 5 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-05-14	Monaldi-Cotugno-CTO Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 25	€15,000
2026-05-14	Municipality of Ventasso Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€8,000
2026-05-14	Municipality of Mirabella Imbaccari Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 37	€1,800
2026-05-14	Francesco Gagliardi Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 14	€1,500
2026-05-14	FeGi M&A Services s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 14	€1,000
2026-05-14	Danta di Cadore Hunting Reserve Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€1,000
2026-05-12	NAIH (Hungary) - NAIH-450-7-2026	🇭🇺 NAIH (Hungary)	Art. 51 Art. 5 Art. 121 Art. 12	€15,000,000
2026-05-12	Technology Company Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 12 Art. 13	€177,000
2026-05-12	Isabel SA Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 15	€120,000
2026-05-12	Société Wallonne des Eaux Insufficient legal basis for data processing	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 28	€86,000
2026-05-12	Operator of an online marketplace Insufficient fulfilment of information obligations	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 12 Art. 13	€42,052
2026-05-08	Permanent TSB Insufficient technical and organisational measures to ensure information security	🇮🇪 Data Protection Authority of Ireland	Art. 5 Art. 32 Art. 33	€277,500
2026-05-08	Law Firm Insufficient fulfilment of data subjects rights	🇧🇪 Belgian Data Protection Authority (APD)	Art. 5 Art. 12 Art. 13 Art. 14	€4,920
2026-05-07	South Staffordshire Plc Insufficient technical and organisational measures to ensure information security	🇬🇧 Information Commissioner (ICO)	Art. 5 Art. 32	€1,112,100
2026-04-30	NAIH (Hungary) - NAIH-4462-5-2026	🇭🇺 NAIH (Hungary)	Art. 51 Art. 5 Art. 52 Art. 121	€10,000,000
2026-04-30	Permanent TSB plc Insufficient technical and organisational measures to ensure information security	🇮🇪 Data Protection Authority of Ireland	Art. 5 Art. 32 Art. 33	€277,500
2026-04-30	Operator of an online shop for alcoholic beverages Insufficient fulfilment of information obligations	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 12 Art. 13	€27,319
2026-04-29	Lepida S.c.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25 Art. 32	€100,000
2026-04-29	Pianeta S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€34,000
2026-04-29	Nouva Corrente S.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 1	€15,000
2026-04-29	Ministry of Justice Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€12,000
2026-04-29	Matera Local Health Authority Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 32	€8,600
2026-04-29	Dr. Guzzo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€5,000
2026-04-29	Montelibretti State Comprehensive School Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€4,000
2026-04-28	Crowd Entertainment Ltd Insufficient legal basis for data processing	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5	€35,000

← previous 126–150 of 1,893 next →