Skip to content

Article 7 GDPR — enforcement

Cited in 123 decisions · €2.2B total fines · median €30,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (55)

Date ↓ Company / party Authority Articles Fine
2025-09-25 E-Power S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €35,000
2025-07-10 Nursery School “La Combricola Dei Birichini Di Betty”
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €10,000
2025-07-10 Nursery School “La Combricola Dei Birichini Di Betty”
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €10,000
2025-05-15 SOLOCAL MARKETING SERVICES
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 6Art. 7 €900,000
2025-05-15 SOLOCAL MARKETING SERVICES
Insufficient legal basis for data processing
🇪🇺 French Data Protection Authority (CNIL) Art. 6Art. 7 €900,000
2025-04-29 Energia Verde S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €100,000
2025-04-29 Energia Verde S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €100,000
2025-04-29 MA Immobiliare S.r.l.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €40,000
2025-04-29 MA Immobiliare S.r.l.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €40,000
2025-04-29 Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €2,000
2025-04-29 Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €2,000
2025-04-10 Acea Energia S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €3,000,000
2025-04-10 Acea Energia S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €3,000,000
2025-04-10 Network of Agencies and Companies
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €850,000
2025-04-10 Network of Agencies and Companies
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €850,000
2025-04-10 Immobiliare Valdalpone S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €15,000
2025-04-10 Immobiliare Valdalpone S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €15,000
2025-04-10 Undici S.r.l.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €8,000
2025-04-10 Undici S.r.l.s.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €8,000
2025-03-28 SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 7Art. 28 €21,600
2025-03-28 SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 7Art. 28 €21,600
2025-03-13 G@S Telecomunicazioni di Losito Lucia
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 13 €15,000
2025-01-27 Orange Romania SA
Non-compliance with general data processing principles
🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) Art. 5Art. 6Art. 7Art. 12 €40,000
2025-01-16 Realmaps S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €100,000
2024-11-27 E.ON Energia spa
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €892,783