Skip to content

Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2023-02-03 Epic Ltd.
Insufficient legal basis for data processing
🇪🇺 Cypriot Data Protection Commissioner Art. 6Art. 24Art. 32 €3,250
2023-02-02 Vodafone
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 13 €10,000
2023-01-31 Dentist
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6Art. 9 €1,000
2023-01-26 Political Party
Insufficient legal basis for data processing
🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD) Art. 6 €12,800
2023-01-26 Misterbianco municipality
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €5,000
2023-01-25 CASAL DE L'ESPLUGA DE FRANCOLÍ
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2023-01-19 WhatsApp Ireland Ltd.
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Ireland Art. 6Art. 12Art. 13 €5,500,000
2023-01-17 Telecommunications Operator
Non-compliance with general data processing principles
🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD) Art. 5Art. 6 €1,020
2023-01-16 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €56,000
2023-01-16 Πολίτης newspaper
Non-compliance with general data processing principles
🇪🇺 Cypriot Data Protection Commissioner Art. 5Art. 6 €7,000
2023-01-12 SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2023-01-11 Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €6,000
2023-01-02 FACTOR ENERGÍA, S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €24,000
2023-01-01 Company
Unknown
🇪🇺 Data Protection Authority of Niedersachsen Art. 6Art. 12Art. 26 €16,600
2023-01-01 MALTA DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇺 Data Protection Commissioner of Malta Art. 5Art. 6 €5,000
2023-01-01 Breikot Management Ltd
Non-compliance with general data processing principles
🇪🇺 Cypriot Data Protection Commissioner Art. 5Art. 6 €3,000
2023-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6Art. 9 €2,000
2023-01-01 Website operator
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Fishing club
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2023-01-01 Supermarket
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6Art. 9
2023-01-01 Clinic
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6
2023-01-01 Company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2022-12-29 SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €24,000