Article 6 GDPR — enforcement

Cited in 1,224 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€11,430
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€11,430
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€10,070
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€9,420
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€8,800
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€8,800
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€8,340
2020-12-18	Legal Person Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6 Art. 14	€8,100
2020-12-17	Miropass S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 28	€40,000
2020-12-17	Comune di Luino Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 37	€10,000
2020-12-17	Comune di Santo Stefano Belbo Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2020-12-16	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€97,150
2020-12-15	Uppsalahem AB Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 5 Art. 6	€29,500
2020-12-15	Online Services Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 13 Art. 8 Art. 6	€10,000
2020-12-15	LATVIA DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Data State Inspectorate (DSI)	Art. 5 Art. 6	€6,250
2020-12-11	Banco Bilbao Vizcaya Argentaria, S.A. Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 13	€5,000,000
2020-12-10	Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 9 Art. 12	€22,200
2020-12-09	Xfera Moviles S.A. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€40,000
2020-12-07	CNIL fines Amazon Europe Core €35M for placing cookies without consent	🇫🇷 CNIL (France)	Art. 6 Art. 9 Art. 83 Art. 94	€35,000,000
2020-12-03	Municipality of Indre Østfold Insufficient technical and organisational measures to ensure information security	🇪🇺 Norwegian Supervisory Authority (Datatilsynet)	Art. 6 Art. 32	€18,840
2020-12-02	Servicio de Alojamientos Responsables, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€6,000
2020-12-02	Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA) Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€5,000
2020-12-01	Südameapteegi e-apteek Insufficient legal basis for data processing	🇪🇺 Estonian Data Protection Authority (AKI)	Art. 5 Art. 6	€100,000
2020-12-01	Azeta.ee e-apteek Insufficient legal basis for data processing	🇪🇺 Estonian Data Protection Authority (AKI)	Art. 5 Art. 6	€100,000
2020-12-01	Apotheka e-apteek Insufficient legal basis for data processing	🇪🇺 Estonian Data Protection Authority (AKI)	Art. 5 Art. 6	€100,000

← previous 976–1000 of 1,224 next →