Skip to content

Article 6 GDPR — enforcement

Cited in 1,225 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2022-12-13 Manager of a real estate co-ownership
Insufficient legal basis for data processing
🇪🇺 National Commission for Data Protection (CNPD) Art. 5Art. 6Art. 12Art. 15 €1,500
2022-12-09 Notary
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €8,000
2022-12-09 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €480
2022-12-01 Lazio Region
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 113Art. 114 €100,000
2022-12-01 A.R.N.A.S. Civico
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €6,000
2022-11-30 PIONIER (law firm)
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 6Art. 9 €9,600
2022-11-29 Company
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €3,000
2022-11-24 Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €3,000
2022-11-24 Private individual
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 32 €1,000
2022-11-15 News service
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 6Art. 7Art. 12 €5,200
2022-11-11 XASTRE DO PETO, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 21 €3,600
2022-11-10 Vodafone Italia S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €500,000
2022-11-10 I-Model s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 17 €10,000
2022-11-10 Conservatorio di Musica S. Cecilia di Roma
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 38Art. 2 €6,000
2022-11-10 Villafranca di Verona municipality
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €4,000
2022-11-08 SC Prestige Media PHG SRL
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6 €5,000
2022-11-02 CÍTRICOS TANTA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €5,000
2022-11-02 Rapido Finance, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2022-10-31 TECHPUMP SOLUTIONS S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 8Art. 12 €525,000
2022-10-31 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2022-10-26 ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €10,000
2022-10-20 Douglas Italia S.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €1,400,000
2022-10-20 Comune di Salento
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €12,000
2022-10-20 Italian Archery Federation (FITARCO)
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10Art. 2 €10,000
2022-10-20 Fondazione Teatro Regio di Torino
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €5,000