Skip to content

Article 6 GDPR — enforcement

Cited in 1,225 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2022-10-20 Istituto di Istruzione Superiore G. Renda di Polistena, Reggio Calabria
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €900
2022-10-18 Private individual
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6 €150
2022-10-17 Clearview Al Inc.
Insufficient fulfilment of data subjects rights
🇪🇺 French Data Protection Authority (CNIL) Art. 6Art. 12Art. 15Art. 17 €20,000,000
2022-10-17 Company
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €6,000
2022-10-14 SEAN SERIOS S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €12,000
2022-10-09 CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €24,000
2022-10-09 UNION DE OFICIALES DE LA GUARDIA CIVIL PROFESIONAL
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €6,000
2022-10-09 Company
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €800
2022-10-06 Alpha Exploration
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €2,000,000
2022-10-06 Veneto region
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €100,000
2022-10-05 Bank
Insufficient legal basis for data processing
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12 €72,500
2022-10-04 Easylife Ltd.
Insufficient legal basis for data processing
🇪🇺 Information Commissioner (ICO) Art. 5Art. 6Art. 9Art. 13 €1,547,000
2022-10-03 Website operator
Non-compliance with general data processing principles
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6 €150
2022-09-28 LfD (Lower Saxony) - Fine EUR 900,000 against bank 🇩🇪 LfD (Lower Saxony) Art. 61Art. 6Art. 61 €900
2022-09-26 TV2 Média Csoport Zrt.
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 12Art. 13 €26,700
2022-09-22 NAIH (Hungary) - NAIH-4667-10/2022 🇭🇺 NAIH (Hungary) Art. 10Art. 28Art. 283Art. 582
2022-09-21 Property development company
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6Art. 14 €50,000
2022-09-21 Surveyor
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Baden-Wuerttemberg Art. 6 €5,000
2022-09-20 Union Sindical Obrera
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €1,800
2022-09-16 SOPHIE ET VOILA, S.L
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €10,000
2022-09-16 MARIELI GABRIELA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2022-09-15 Lazio Region
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 12 €100,000
2022-09-15 Thiene municipality
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €3,000
2022-09-12 Coin dealer
Non-compliance with general data processing principles
🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) Art. 5Art. 6Art. 7Art. 12 €80,700
2022-09-09 School
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 12Art. 13 €15,000