Article 6 GDPR — enforcement

Cited in 1,222 decisions · €3.0B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2019-04-17	HUNGARY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6	€9,400
2019-04-08	Medical centers Insufficient legal basis for data processing	🇪🇺 Data Protection Commision of Bulgaria (KZLD)	Art. 5 Art. 9 Art. 6	€510
2019-03-26	A.P. EOOD Insufficient legal basis for data processing	🇪🇺 Data Protection Commision of Bulgaria (KZLD)	Art. 5 Art. 6	€5,100
2019-03-04	Unnamed financial institution Insufficient fulfilment of data subjects rights	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 13 Art. 17 Art. 6	€3,200
2019-03-01	N26 Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Berlin	Art. 6	€50,000
2019-02-28	Mayor's Office of the city of Kecdkemét Insufficient legal basis for data processing	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6	€3,200
2019-02-26	Telecommunication service provider Insufficient legal basis for data processing	🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD)	Art. 6 Art. 5	€27,100
2019-02-05	Private person Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sachsen-Anhalt	Art. 6 Art. 5	€2,500
2019-01-21	Google LLC Insufficient legal basis for data processing	🇪🇺 French Data Protection Authority (CNIL)	Art. 13 Art. 14 Art. 6 Art. 5	€50,000,000
2019-01-17	Bank Insufficient legal basis for data processing	🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD)	Art. 6 Art. 5	€500
2019-01-10	Employer Insufficient legal basis for data processing	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 6	€388
2019-01-01	Vodafone España, S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€40,000
2019-01-01	Vodafone España, S.A.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€21,000
2019-01-01	Doctor Insufficient legal basis for data processing	🇪🇺 Cypriot Data Protection Commissioner	Art. 5 Art. 6	€14,000
2019-01-01	Newspaper Insufficient legal basis for data processing	🇪🇺 Cypriot Data Protection Commissioner	Art. 6	€10,000
2019-01-01	Police Officer Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Mecklenburg-Vorpommern	Art. 6	€800
2019-01-01	GERMANY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Saxony	Art. 6	—
2019-01-01	GERMANY DPA: Insufficient legal basis for data processing Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Niedersachsen	Art. 6	—
2018-12-20	Private person Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 13	€2,200
2018-12-04	Bank Insufficient legal basis for data processing	🇪🇺 Bulgarian Commission for Personal Data Protection (KZLD)	Art. 5 Art. 6	€500
2018-09-27	Private car owner Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6	€300
2017-11-08	Datatilsynet (Norway) - 15/01355	🇳🇴 Datatilsynet (Norway)	Art. 411 Art. 4 Art. 51 Art. 5	—

← previous 1201–1222 of 1,222