Article 7 GDPR — enforcement

Cited in 116 decisions · €2.2B total fines · median €30,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (55)

Read Article 7 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2022-10-20	Douglas Italia S.p.a. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€1,400,000
2022-10-06	Alpha Exploration Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€2,000,000
2022-09-12	Coin dealer Non-compliance with general data processing principles	🇪🇺 Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)	Art. 5 Art. 6 Art. 7 Art. 12	€80,700
2022-07-07	Senseonics Inc. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 9	€45,000
2022-06-16	SA Rossel & Cie Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 6 Art. 7 Art. 12 Art. 13	€0
2022-05-25	Roularta Media Group Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 7 Art. 12	€50,000
2022-05-25	APD/GBA (Belgium) - 85/2022	🇧🇪 APD/GBA (Belgium)	Art. 411 Art. 4 Art. 51 Art. 5	€50
2022-04-28	Nos s.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€20,000
2022-04-07	Made in Italy s.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 7 Art. 15 Art. 17	€20,000
2022-01-21	Belgian DPA rules on competence in cross-border cookie consent complaint involving	🇧🇪 APD/GBA (Belgium)	Art. 41 Art. 4 Art. 411 Art. 51	—
2021-12-21	FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7 Art. 13	€2,000
2021-12-17	CLUB DEPORTIVO RITMO DE ANDALUCÍA Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7 Art. 13	€4,000
2021-11-23	Icelandic Ministry of Industry and Innovation Non-compliance with general data processing principles	🇪🇺 Icelandic data protection authority ('Persónuvernd')	Art. 5 Art. 6 Art. 7 Art. 13	€51,000
2021-10-11	MAF.COM ESQUI CLUB Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 7	€10,000
2021-09-16	Sky Italia S.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€3,296,326
2021-08-02	Unser Ö-Bonus Club GmbH Insufficient legal basis for data processing	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 6 Art. 7 Art. 12	€500,000
2021-07-22	APDCAT (Catalonia) - PD 6/2021	🇪🇸 APDCAT (Catalonia)	Art. 7	—
2021-06-24	Magazine publisher Insufficient legal basis for data processing	🇪🇺 Deputy Data Protection Ombudsman	Art. 5 Art. 7 Art. 12 Art. 21	€8,500
2021-05-13	Iren Mercato S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7	€2,856,169
2021-05-03	EDPS - 2019-0878	🇪🇺 EDPS	Art. 7	—
2021-04-30	CNIL (France) - SAN-2021-004	🇫🇷 CNIL (France)	Art. 7	€100,000,000
2021-04-15	S.C. Tip Top Food Industry S.R.L Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7	€5,000
2021-03-25	Fastweb S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€4,500,000
2021-03-25	OneDirect Srl Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 6 Art. 7 Art. 30 Art. 31	€30,000
2021-01-27	Family Service / N.D.P.K. nv. Insufficient legal basis for data processing	🇪🇺 Belgian Data Protection Authority (APD)	Art. 5 Art. 6 Art. 7 Art. 13	€50,000

← previous 76–100 of 116 next →