Article 6 GDPR — enforcement
Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2023-07-26 | SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €1,200 |
| 2023-07-26 | Private individual Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €600 |
| 2023-07-18 | Università Telematica E-Campus Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €75,000 |
| 2023-07-18 | DIGI SPAIN TELECOM, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €70,000 |
| 2023-07-18 | Compara Facile S.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €40,000 |
| 2023-07-18 | Cat s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €10,000 |
| 2023-07-18 | Ermeslink di Giovanni Di Stefano Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €5,000 |
| 2023-07-18 | Private individual Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €400 |
| 2023-07-17 | NANDIVALE, S.L Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €10,000 |
| 2023-07-12 | Private individual Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €10,000 |
| 2023-07-07 | KUGELCHEN PROPIERTIES, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €2,000 |
| 2023-07-03 | ODAFONE SERVICIOS, S.L.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €56,000 |
| 2023-06-27 | Creditinfo Lánstraust hf. Insufficient legal basis for data processing | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 8Art. 9 | €257,000 |
| 2023-06-27 | eCommerce 2020 ApS Insufficient legal basis for data processing | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 8Art. 9 | €51,000 |
| 2023-06-27 | Almennri innheimtu ehf Insufficient legal basis for data processing | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 8Art. 9 | €24,000 |
| 2023-06-26 | Bonnier News AB Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Sweden | Art. 6 | €1,100,000 |
| 2023-06-21 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €56,000 |
| 2023-06-20 | GRUPO TRANSAHER, SL. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €50,000 |
| 2023-06-16 | Irish Departement of Health Non-compliance with general data processing principles | 🇪🇺 Data Protection Authority of Ireland | Art. 5Art. 6Art. 9 | €22,500 |
| 2023-06-16 | Private individual Insufficient legal basis for data processing | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 6 | €1,000 |
| 2023-06-14 | Digi Spain Telecom, S.L.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €70,000 |
| 2023-06-14 | Digi Spain Telecom, S.L.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €70,000 |
| 2023-06-13 | DIGI SPAIN TELECOM, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €70,000 |
| 2023-06-13 | DIGI SPAIN TELECOM, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €70,000 |
| 2023-06-12 | Piraeus Bank Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 15Art. 25 | €210,000 |