Skip to content

Article 6 GDPR — enforcement

Cited in 1,224 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2021-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hamburg Art. 5Art. 6 €5,000
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €1,800
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €600
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €500
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hessen Art. 5Art. 6 €400
2021-01-01 Real estate agent
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6Art. 12
2021-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Medical clinic
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Physician
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6Art. 9
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Job center employee
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Police officer
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2021-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Saxony Art. 6
2021-01-01 Physician
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2021-01-01 Private individual
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Brandenburg Art. 6
2021-01-01 Attorney
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Berlin Art. 5Art. 6
2020-12-30 ING Bank N.V. Amsterdam - Bucharest office
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6 €3,000
2020-12-23 BELGIUM DPA: Insufficient fulfilment of data subjects rights
Insufficient fulfilment of data subjects rights
🇪🇺 Belgian Data Protection Authority (APD) Art. 14Art. 12Art. 6Art. 5 €15,000
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €26,710
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €12,910
2020-12-18 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 14 €11,830