Skip to content

Article 6 GDPR — enforcement

Cited in 1,273 decisions · €3.4B total fines · median €10,000 · top authority: 🇪🇺Spanish Data Protection Authority (aepd) (358)

Date ↓ Company / party Authority Articles Fine
2025-11-26 Legal Entity
Insufficient legal basis for data processing
🇪🇺 Slovenian Supervisory Authority (Informacijski pooblaščenec) Art. 5Art. 6 €6,600
2025-11-26 Cucina di Fabio S.R.L.
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6Art. 15Art. 17Art. 25 €3,000
2025-11-26 Cucina di Fabio S.R.L.
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6Art. 15Art. 17Art. 25 €3,000
2025-11-24 Telecommunications operator (operator of electronic communications networks and services)
Non-compliance with general data processing principles
🇪🇺 Croatian Data Protection Authority (azop) Art. 5Art. 6Art. 12Art. 13 €4,500,000
2025-11-24 Telecommunications operator (operator of electronic communications networks and services)
Non-compliance with general data processing principles
🇪🇺 Croatian Data Protection Authority (azop) Art. 5Art. 6Art. 12Art. 13 €4,500,000
2025-11-24 DSB (Austria) - 2025-0.950.759 🇦🇹 DSB (Austria) Art. 51Art. 5Art. 51Art. 61 —
2025-11-21 IDCQ HOSPITALES Y SANIDAD, S.L.U.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 9Art. 25 €1,200,000
2025-11-18 Journalist
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 6 €80
2025-11-18 Journalist
Insufficient legal basis for data processing
🇪🇺 Austrian Data Protection Authority (dsb) Art. 5Art. 6 €80
2025-11-14 AEPD (Spain) - PS-00480-2025 🇪🇸 AEPD (Spain) Art. 61Art. 6Art. 27 €72,000
2025-11-13 Comune di Orte
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €6,000
2025-11-13 Comune di Orte
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €6,000
2025-11-12 Fan Courier Express S.R.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 12Art. 15 €4,000
2025-11-12 Fan Courier Express S.R.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 12Art. 15 €4,000
2025-11-10 Whitedecor SRL
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6Art. 7Art. 12Art. 15 €2,000
2025-11-10 Whitedecor SRL
Insufficient legal basis for data processing
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 6Art. 7Art. 12Art. 15 €2,000
2025-10-27 Shop Owner
Insufficient legal basis for data processing
🇦🇹 Austrian Data Protection Authority (dsb) Art. 5Art. 6 €1,500
2025-10-23 Ordine degli Avvocati di Latina
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10 €15,000
2025-10-23 Comune di Curtarolo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €15,000
2025-10-23 Ordine degli Avvocati di Latina
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10 €15,000
2025-10-23 Comune di Curtarolo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €15,000
2025-10-23 'Statista Aldo Moro' Higher Education Institute in Fara Sabina
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 37 €4,000
2025-10-23 'Statista Aldo Moro' Higher Education Institute in Fara Sabina
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 37 €4,000
2025-10-23 Mayor of the Municipality of Calvi Risorta
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €1,000
2025-10-23 Mayor of the Municipality of Calvi Risorta
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €1,000