Skip to content

Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2020-10-06 Callesgarcia, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €4,000
2020-10-03 Avata Hispania, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 28 €3,000
2020-10-01 H&M Hennes & Mauritz Online Shop A.B. & Co. KG
Insufficient legal basis for data processing
🇪🇺 Data Protection Authority of Hamburg Art. 5Art. 6 €35,258,708
2020-09-30 Azienda Ospedaliera di Rilievo Nazionale 'Antonio Cardarelli' (Private Hospital)
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 13Art. 28 €80,000
2020-09-30 Scanshare s.r.l.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 32 €60,000
2020-09-30 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 5Art. 6Art. 12Art. 14 €20,050
2020-09-30 Venu Sanz Chef, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €3,000
2020-09-25 Xfera Moviles S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €60,000
2020-09-25 Odin Flissenter AS
Insufficient legal basis for data processing
🇪🇺 Norwegian Supervisory Authority (Datatilsynet) Art. 5Art. 6 €13,900
2020-09-22 GLP Instalaciones 86, SL
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €60,000
2020-09-17 Vodafone España, SAU
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €60,000
2020-09-17 Legal Person
Insufficient legal basis for data processing
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 15Art. 17 €3,200
2020-09-11 Political Party
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €1,500
2020-09-08 Legal Person
Insufficient fulfilment of data subjects rights
🇪🇺 Czech Data Protection Auhtority (UOOU) Art. 6Art. 17 €2,000
2020-09-07 Former mayor of a community
Insufficient legal basis for data processing
🇪🇺 Belgian Data Protection Authority (APD) Art. 5Art. 6 €5,000
2020-09-03 Comune di Casaloldo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €2,000
2020-09-01 Telefónica Móviles España, SAU
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €75,000
2020-09-01 Apartment building owners association
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 12Art. 13 €500
2020-08-31 Surveyor General of Poland ('GKK')
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 6 €22,700
2020-08-28 Basketball Federation of Castilla and Leon
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €5,000
2020-08-17 Health care worker
Insufficient legal basis for data processing
🇪🇺 Estonian Data Protection Authority (AKI) Art. 5Art. 6 €56
2020-08-17 Police Officer
Insufficient legal basis for data processing
🇪🇺 Estonian Data Protection Authority (AKI) Art. 5Art. 6 €48
2020-08-10 Community of Baronissi
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €10,000
2020-08-10 Cavauto S.R.L.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7 €10,000
2020-08-05 Acc Consulting Varsinais-Suomi
Insufficient legal basis for data processing
🇪🇺 Deputy Data Protection Ombudsman Art. 5Art. 6 €7,000