Article 6 GDPR — enforcement
Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-12-28 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €100,000 |
| 2022-12-28 | Homeowners Association Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 15 | €2,000 |
| 2022-12-28 | Homeowners Association Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €600 |
| 2022-12-21 | Hotel Insufficient legal basis for data processing | 🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Art. 5Art. 6Art. 12Art. 13 | €8,000 |
| 2022-12-20 | Private individual Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €3,000 |
| 2022-12-15 | Edison Energia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €4,900,000 |
| 2022-12-15 | ORANGE ESPAGNE, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €30,000 |
| 2022-12-15 | Verizon Connect Italy S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 28 | €30,000 |
| 2022-12-15 | HOSPITAL RECOLETAS PONFERRADA, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 15 | €16,000 |
| 2022-12-15 | Comune di Vicchio Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €8,000 |
| 2022-12-15 | Comune di Bracciano Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €6,000 |
| 2022-12-15 | Comune di Borgia Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 37 | €5,000 |
| 2022-12-15 | Scuola Statale Secondaria di I^ grado 'Bianco-Pascol' Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 12 | €3,000 |
| 2022-12-13 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €56,000 |
| 2022-12-13 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €56,000 |
| 2022-12-13 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €56,000 |
| 2022-12-13 | Manager of a real estate co-ownership Insufficient legal basis for data processing | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 5Art. 6Art. 12Art. 15 | €1,500 |
| 2022-12-09 | Notary Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €8,000 |
| 2022-12-09 | Private individual Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €480 |
| 2022-12-01 | Lazio Region Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 113Art. 114 | €100,000 |
| 2022-12-01 | A.R.N.A.S. Civico Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €6,000 |
| 2022-11-30 | PIONIER (law firm) Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 6Art. 9 | €9,600 |
| 2022-11-29 | Company Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €3,000 |
| 2022-11-24 | Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €3,000 |
| 2022-11-24 | Private individual Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 32 | €1,000 |