Article 6 GDPR — enforcement

Cited in 1,176 decisions · €922.4M total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Read Article 6 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-07-22	Legal Entity Insufficient legal basis for data processing	🇪🇺 Slovenian Supervisory Authority (Informacijski pooblaščenec)	Art. 6 Art. 9	€2,200
2025-07-18	CLUB BALONCESTO TELDE Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€1,000
2025-07-18	CLUB BALONCESTO TELDE Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6	€1,000
2025-07-10	Magna PT S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€50,000
2025-07-10	Magna PT S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€50,000
2025-07-10	Nursery School “La Combricola Dei Birichini Di Betty” Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€10,000
2025-07-10	Nursery School “La Combricola Dei Birichini Di Betty” Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€10,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-07-10	Università degli Studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 17	€8,000
2025-07-10	Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€4,000
2025-07-10	Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€4,000
2025-06-26	Alliance for the Union of Romanians Party Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 25 Art. 32	€25,000
2025-06-26	Alliance for the Union of Romanians Party Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 25 Art. 32	€25,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-26	SC Piramida Trade Invest SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 12 Art. 15	€3,000
2025-06-23	Piraeus Bank S.A. Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 6	€50,000
2025-06-23	Piraeus Bank S.A. Insufficient legal basis for data processing	🇪🇺 Hellenic Data Protection Authority (HDPA)	Art. 5 Art. 6	€50,000
2025-06-20	COLEGIO VIRGEN DE EUROPA, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 13	€24,000
2025-06-20	COLEGIO VIRGEN DE EUROPA, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 6 Art. 13	€24,000
2025-06-19	SC Diamir SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 58	€1,000
2025-06-19	SC Diamir SRL Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 6 Art. 58	€1,000
2025-06-18	AB Storstockholms Lokaltrafik Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 6 Art. 9	€6,800
2025-06-18	Waxholms Ångfartygs AB Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 6 Art. 9	€6,800
2025-06-18	AB Storstockholms Lokaltrafik Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 6 Art. 9	€6,800
2025-06-18	Waxholms Ångfartygs AB Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)	Art. 6 Art. 9	€6,800

← previous 176–200 of 1,176 next →