Article 5 GDPR — enforcement

Cited in 1,716 decisions · €1.8B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (541)

Read Article 5 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-08-17	Police Officer Insufficient legal basis for data processing	🇪🇺 Estonian Data Protection Authority (AKI)	Art. 5 Art. 6	€48
2020-08-10	Community of Baronissi Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€10,000
2020-08-10	Cavauto S.R.L. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7	€10,000
2020-08-05	Spartoo Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 13 Art. 14	€250,000
2020-08-05	Acc Consulting Varsinais-Suomi Insufficient legal basis for data processing	🇪🇺 Deputy Data Protection Ombudsman	Art. 5 Art. 6	€7,000
2020-08-05	Restaurant Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 12 Art. 13	€3,000
2020-08-05	School Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2020-08-05	Bank Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€100
2020-08-04	Vodafone España, SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-08-04	PrivatBo A.M.B.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 5 Art. 32	€20,100
2020-08-04	Mapei S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2020-08-04	Supermarket Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€1,000
2020-07-31	Vodafone España SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€45,000
2020-07-30	Community of Manduria Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2020-07-29	Region of Campania Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2020-07-29	Community of San Giorgio Jonico Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€3,000
2020-07-28	Arp Hansen Hotel Group A/S Non-compliance with general data processing principles	🇪🇺 Danish Data Protection Authority (Datatilsynet)	Art. 5	€147,800
2020-07-28	Communal political association Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 14	€3,000
2020-07-23	Telefónica Móviles España, SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€75,000
2020-07-23	Telefónica Móviles España, SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€70,000
2020-07-23	Telefónica Móviles España, SAU Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€55,000
2020-07-23	El Periódico de Catalunya, S.L.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€10,000
2020-07-23	Forbes Hungary Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6	€560
2020-07-20	Orange Espagne S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€80,000
2020-07-20	Xfera Moviles S.A. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5	€70,000

← previous 1501–1525 of 1,716 next →