Article 6 GDPR — enforcement

Cited in 1,272 decisions · €3.4B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-07-23	Ancel Keys Comprehensive School Castelnuovo Cilento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-07-20	Garante per la protezione dei dati personali (Italy) - 10254256	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 49 Art. 4 Art. 410 Art. 415	€12,000
2026-07-18	Garante per la protezione dei dati personali (Italy) - 471/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 5 Art. 51 Art. 51 Art. 6	€20,000
2026-07-16	Garante per la protezione dei dati personali (Italy) - 10128005	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€50,000
2026-07-16	Garante per la protezione dei dati personali (Italy) - 10192784	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 1 Art. 51 Art. 5 Art. 51	€16,000
2026-07-16	AEPD (Spain) - EXP202102529	🇪🇸 AEPD (Spain)	Art. 415 Art. 4 Art. 51 Art. 5	—
2026-07-14	Garante fines Lusha Systems Inc. over unauthorized B2B contact database	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 32 Art. 3 Art. 32 Art. 51	€2,000,000
2026-07-14	La Terrazza Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€700
2026-07-03	University of Pisa Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 25 Art. 32	€15,000
2026-07-03	Municipality of San Genesio and Uniti Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-07-03	Municipality of Villaputzu Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2026-06-24	Persónuvernd (Iceland) - 2025010364	🇮🇸 Persónuvernd (Iceland)	Art. 51 Art. 5 Art. 51 Art. 51	—
2026-06-18	Garante per la protezione dei dati personali (Italy) - 476/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 123 Art. 12 Art. 17 Art. 6	€460,000
2026-06-18	Enna Provincial Health Authority Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€20,000
2026-06-18	Garante per la protezione dei dati personali (Italy) - 462/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 21 Art. 2 Art. 41 Art. 4	€6,600
2026-06-18	Cosmint S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€6,600
2026-06-18	Garante per la protezione dei dati personali (Italy) - 457/2026	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 61	€5,000
2026-06-16	SILVANERGIA 2022, S.L. Insufficient legal basis for data processing	🇪🇸 Spanish Data Protection Authority (aepd)	Art. 6	€3,000
2026-06-16	Dormeo Home SRL Insufficient fulfilment of data subjects rights	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 21	€1,000
2026-06-11	Green Partner S.r.l.s. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,300
2026-06-11	Pietro d'Abano State Vocational School Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€1,000
2026-06-05	Reda Naujokaitienė Insufficient legal basis for data processing	🇱🇹 Lithuanian Data Protection Authority (VDAI)	Art. 5 Art. 6 Art. 9	€1,153
2026-06-01	Elkjøp AS Insufficient legal basis for data processing	🇳🇴 Norwegian Supervisory Authority (Datatilsynet)	Art. 5 Art. 6 Art. 12	€1,820,000
2026-05-29	IndaNext Hungary Kft. (legal successor of Blikk Kft.) Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 9 Art. 12	€70,518
2026-05-29	Blikk Kft. Insufficient legal basis for data processing	🇭🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 6 Art. 9 Art. 12	€70,300

← previous 26–50 of 1,272 next →