Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2020-02-03	Vodafone España, S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-02-03	Xfera Moviles S.A. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€60,000
2020-02-03	Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 21	€20,000
2020-02-03	Banco Bilbao Vizcaya Argentaria S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 21	€6,670
2020-02-03	Queseria Artesenal Ameco S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€5,000
2020-02-03	Automoción Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€800
2020-01-30	Comune di Colledara Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2020-01-15	TIM (telecommunications operator) Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 17 Art. 21	€27,800,000
2020-01-15	Community of Francavilla Fontana Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€10,000
2020-01-13	eShop for Sports (M.L. PRO.FIT SOLUTIONS LTD) Insufficient legal basis for data processing	🇪🇺 Cypriot Data Protection Commissioner	Art. 6	€1,000
2020-01-07	EDP España S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€75,000
2020-01-07	EDP Comercializadora, S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€75,000
2020-01-07	Asociación de Médicos Demócratas Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€10,000
2020-01-06	Utility Company Insufficient legal basis for data processing	🇪🇺 Data Protection Commision of Bulgaria (KZLD)	Art. 6	€5,110
2020-01-01	CZECH REPUBLIC DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 12 Art. 15	€19,200
2020-01-01	Mall.tv Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6	€2,700
2020-01-01	Police officer Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hamburg	Art. 5 Art. 6	€400
2020-01-01	Police officer Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hamburg	Art. 5 Art. 6	€300
2020-01-01	Operator of a ballet school Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 5 Art. 6 Art. 7	—
2020-01-01	Company Insufficient technical and organisational measures to ensure information security	🇪🇺 Data Protection Authority of Hamburg	Art. 6 Art. 32	—
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2020-01-01	Medical assistant Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 6	—
2020-01-01	Police officer Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hamburg	Art. 5 Art. 6	—
2020-01-01	Municipality Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 13 Art. 14	—
2020-01-01	Police officer Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hamburg	Art. 5 Art. 6	—

← previous 1076–1100 of 1,176 next →