Article 7 GDPR — enforcement

Cited in 106 decisions · €58.2M total fines · median €30,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (55)

Read Article 7 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2025-04-29	MA Immobiliare S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-04-29	Versilmagra Immobiliare di Robertelli Davide & C. S.a.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000
2025-04-29	Versilmagra Immobiliare di Robertelli Davide & C. S.a.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Acea Energia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€3,000,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Network of Agencies and Companies Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€850,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Immobiliare Valdalpone S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€15,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-04-10	Undici S.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€8,000
2025-03-28	SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 7 Art. 28	€21,600
2025-03-28	SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 7 Art. 28	€21,600
2025-03-13	G@S Telecomunicazioni di Losito Lucia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€15,000
2025-01-27	Orange Romania SA Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7 Art. 12	€40,000
2025-01-16	Realmaps S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€100,000
2024-11-27	E.ON Energia spa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€892,783
2024-11-13	Illumia Spa Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 24	€678,897
2024-06-20	Fastweb S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€1,000,000
2024-04-24	Rossi Carta S.r.l. Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 7 Art. 12 Art. 15	€30,000
2024-04-22	Betting company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 6 Art. 7 Art. 13	€20,000
2024-04-22	Betting company Insufficient legal basis for data processing	🇪🇺 Croatian Data Protection Authority (azop)	Art. 6 Art. 7 Art. 13	€15,000
2024-02-26	Company Insufficient legal basis for data processing	🇭🇷 Croatian Data Protection Authority (azop)	Art. 6 Art. 7 Art. 13	€20,000
2024-02-22	Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2024-01-01	Company Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Hessen	Art. 6 Art. 7	€10,000

← previous 26–50 of 106 next →