Skip to content

Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2022-08-05 Colosseo S.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 15 €1,000
2022-08-05 Mister Brick S.a.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 15 €1,000
2022-08-02 Banco Bilbao Vizcaya Argentaria S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €42,000
2022-08-02 Krokatjønnvegen 15 AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 6 €30,200
2022-08-01 LAST LAP, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 9 €9,600
2022-07-28 Hannoversche Volksbank
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Niedersachsen Art. 6 €900,000
2022-07-26 TELEFÓNICA MÓVILES ESPAÑA, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €15,000
2022-07-21 Acqua Novara.VCO S.p.a.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 28Art. 2 €20,000
2022-07-21 Clio S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 30Art. 2 €10,000
2022-07-21 Ginosa municipality
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 28Art. 2 €5,000
2022-07-19 DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 12 €20,000
2022-07-15 ECOZONO Y CULTURA, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,600
2022-07-07 Senseonics Inc.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 9 €45,000
2022-07-06 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €56,000
2022-06-30 Federazione Italiana Sommelier, Albergatori e Ristoratori
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €5,000
2022-06-28 FLY FUT, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2022-06-20 Asociația de Proprietari Aviației Park
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6 €7,000
2022-06-16 SA Rossel & Cie
Insufficient legal basis for data processing
🇪🇺 Belgian Data Protection Authority (APD) Art. 6Art. 7Art. 12Art. 13 €0
2022-06-09 Cribis Credit Management s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €10,000
2022-06-09 Private individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €10,000
2022-05-31 Stołeczny Ośrodek dla Osób Nietrzeźwych
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 6 €2,100
2022-05-26 Intesa Sanpaolo S.p.A
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €100,000
2022-05-26 Azienda Sanitaria Locale Roma
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €46,000
2022-05-26 Region of Tuscany
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €16,000
2022-05-26 Università Agraria di Nettuno
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €4,000