Skip to content

Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2020-12-02 Servicio de Alojamientos Responsables, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €6,000
2020-12-02 Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €5,000
2020-12-01 Südameapteegi e-apteek
Insufficient legal basis for data processing
🇪🇺 Estonian Data Protection Authority (AKI) Art. 5Art. 6 €100,000
2020-12-01 Azeta.ee e-apteek
Insufficient legal basis for data processing
🇪🇺 Estonian Data Protection Authority (AKI) Art. 5Art. 6 €100,000
2020-12-01 Apotheka e-apteek
Insufficient legal basis for data processing
🇪🇺 Estonian Data Protection Authority (AKI) Art. 5Art. 6 €100,000
2020-11-26 Concentrix Cvg Italy s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €20,000
2020-11-25 Miraclia Telecomunicaciones S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13Art. 14 €40,000
2020-11-25 Gnosjö Municipality
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) Art. 5Art. 6Art. 13Art. 35 €19,500
2020-11-25 Private Individual
Insufficient legal basis for data processing
🇪🇺 Belgian Data Protection Authority (APD) Art. 6Art. 25 €1,500
2020-11-23 Recambios Villalegre S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €12,000
2020-11-19 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €36,000
2020-11-19 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 12 €4,800
2020-11-16 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €42,000
2020-11-13 BELGIUM DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇺 Belgian Data Protection Authority (APD) Art. 5Art. 6Art. 12Art. 13 €1,500
2020-11-12 Vodafone Italia S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 15 €12,251,601
2020-11-11 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €42,000
2020-11-05 Telefonica Moviles Espana, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €75,000
2020-11-03 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €30,000
2020-10-28 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €36,000
2020-10-19 Grant Ideas Ltd
Insufficient legal basis for data processing
🇪🇺 Cypriot Data Protection Commissioner Art. 5Art. 6 €1,000
2020-10-19 Private Individual
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 6 €150
2020-10-14 Legal Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 12 €12,030
2020-10-09 Centro de Investigación y Estudio para la Obesidad, SL
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €50,000
2020-10-09 Private Person
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €2,000
2020-10-06 Lycamobile
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €60,000