Article 6 GDPR — enforcement

Cited in 1,225 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2022-09-09	HDPA (Greece) - 50/2022	🇬🇷 HDPA (Greece)	Art. 51 Art. 5 Art. 51 Art. 52	€15
2022-09-06	MUXERS CONCEPT, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€20,000
2022-09-05	Meta Platforms, Inc. Non-compliance with general data processing principles	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 6 Art. 12 Art. 24	€405,000,000
2022-09-01	Private individual Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€10,000
2022-09-01	Liceo Statale 'Edoardo Amaldi” Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€4,000
2022-08-28	DIGITECNIA SOLUTIONS, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€1,200
2022-08-25	Recover AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6	€20,000
2022-08-23	Operator of a public toilet Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 13	€25,000
2022-08-11	AMPLIFON Hungary Trade and Service Provider LLC Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 12 Art. 14	€197,000
2022-08-09	Wabag Water Services SRL Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6	€1,000
2022-08-08	Company Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 13	€735
2022-08-05	Prodesspa Decoratius i Pintures , S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€9,000
2022-08-05	Mister Brick S.a.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 15	€1,000
2022-08-05	Colosseo S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 15	€1,000
2022-08-02	Banco Bilbao Vizcaya Argentaria S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€42,000
2022-08-02	Krokatjønnvegen 15 AS Insufficient legal basis for data processing	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6	€30,200
2022-08-01	LAST LAP, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 9	€9,600
2022-07-28	Hannoversche Volksbank Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Niedersachsen	Art. 6	€900,000
2022-07-26	TELEFÓNICA MÓVILES ESPAÑA, S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€15,000
2022-07-26	APD/GBA (Belgium) - 117/2022	🇧🇪 APD/GBA (Belgium)	Art. 61 Art. 6 Art. 123 Art. 12	—
2022-07-21	Acqua Novara.VCO S.p.a. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 28 Art. 2	€20,000
2022-07-21	Clio S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30 Art. 2	€10,000
2022-07-21	Ginosa municipality Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 28 Art. 2	€5,000
2022-07-19	DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A. Insufficient fulfilment of data subjects rights	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 6 Art. 12	€20,000
2022-07-19	APD/GBA (Belgium) - 115/2022	🇧🇪 APD/GBA (Belgium)	Art. 51 Art. 5 Art. 61 Art. 6	—

← previous 651–675 of 1,225 next →