Skip to content

Article 6 GDPR — enforcement

Cited in 1,225 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2023-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6Art. 9 €2,000
2023-01-01 Website operator
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Supermarket
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6Art. 9
2023-01-01 Fishing club
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2023-01-01 Clinic
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2023-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6
2023-01-01 Company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Bremen Art. 6
2022-12-29 SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €24,000
2022-12-28 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €100,000
2022-12-28 Homeowners Association
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 15 €2,000
2022-12-28 Homeowners Association
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €600
2022-12-21 Hotel
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12Art. 13 €8,000
2022-12-20 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2022-12-15 Edison Energia S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €4,900,000
2022-12-15 Verizon Connect Italy S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 28 €30,000
2022-12-15 ORANGE ESPAGNE, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €30,000
2022-12-15 HOSPITAL RECOLETAS PONFERRADA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 15 €16,000
2022-12-15 Comune di Vicchio
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €8,000
2022-12-15 Comune di Bracciano
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €6,000
2022-12-15 Comune di Borgia
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 37 €5,000
2022-12-15 Scuola Statale Secondaria di I^ grado 'Bianco-Pascol'
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 12 €3,000
2022-12-13 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €56,000
2022-12-13 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €56,000
2022-12-13 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €56,000