Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-10-23	Mayor of the Municipality of Calvi Risorta Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€1,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-16	Experian Nederland B.V. Insufficient legal basis for data processing	🇪🇺 Dutch Supervisory Authority for Data Protection (AP)	Art. 5 Art. 6 Art. 12 Art. 14	€2,700,000
2025-10-09	Order of Nursing Professions of Pisa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€16,000
2025-10-09	Order of Nursing Professions of Pisa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€16,000
2025-10-09	Interprovincial Order of Medical Radiology Technicians and Technical Health Professions in Rehabilitation and Prevention of AQ - CH - PE - TE Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 37	€6,000
2025-10-09	Interprovincial Order of Medical Radiology Technicians and Technical Health Professions in Rehabilitation and Prevention of AQ - CH - PE - TE Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 37	€6,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-10-09	FT Solutions S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€5,000
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-29	Owner of a Tesla Car Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 6 Art. 12 Art. 13	€600
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	E-Power S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€35,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-09-25	Provincia Autonoma di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€32,000
2025-09-25	Vimar S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€15,000
2025-09-25	Vimar S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€15,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	La Prima Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 12 Art. 17 Art. 58	€10,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	Comune di Isola del Gran Sasso Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 12	€3,000
2025-09-25	SERVACE S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€840
2025-09-25	SERVACE S.L. Non-compliance with general data processing principles	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6	€840
2025-09-17	DIGI SPAIN TELECOM, S.L.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€150,000
2025-09-17	DIGI SPAIN TELECOM, S.L.U. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€150,000

← previous 126–150 of 1,176 next →