Skip to content

Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2021-08-30 Furnishyourspace S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 12Art. 13 €6,000
2021-08-26 NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε.
Non-compliance with general data processing principles
🇪🇺 Hellenic Data Protection Authority (HDPA) Art. 5Art. 6Art. 12Art. 17 €5,000
2021-08-12 Waxing Palace AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6Art. 13 €9,600
2021-08-09 CLUB GIMNASIA RÍTMICA SAN ANTONIO
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €5,000
2021-08-03 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 17 €96,000
2021-08-02 Unser Ö-Bonus Club GmbH
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 6Art. 7Art. 12 €500,000
2021-07-30 Gas inspector
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €4,000
2021-07-30 Private Individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2021-07-30 Private Individual
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 14 €200
2021-07-27 PRA Iberia S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 15 €60,000
2021-07-27 INSTAPACK, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €3,000
2021-07-27 Vasco Andaluza de Inversiones S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2021-07-27 Body Tonic Shop S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2021-07-27 Gerco Fit S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €2,000
2021-07-26 Mercadona S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 9Art. 12 €2,520,000
2021-07-22 Atac s.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 30Art. 32 €400,000
2021-07-22 Regione Lombardia
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €200,000
2021-07-22 Flowbird Italia s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 30 €30,000
2021-07-12 Telefónica Móviles España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €45,000
2021-07-08 Caixabank S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €50,000
2021-07-08 Malagatrom S.L.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €4,000
2021-07-07 Nordbornholms Byggeforretning Aps
Insufficient legal basis for data processing
🇪🇺 Danish Data Protection Authority (Datatilsynet) Art. 5Art. 6 €53,800
2021-07-05 Higher Education Institution
Non-compliance with general data processing principles
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 6 €25,000
2021-07-02 Private Individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €1,500
2021-07-01 Private Individual
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €6,000