Article 7 GDPR — enforcement
Cited in 106 decisions · €58.2M total fines · median €30,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (55)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-06-16 | SA Rossel & Cie Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 6Art. 7Art. 12Art. 13 | €0 |
| 2022-05-25 | Roularta Media Group Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 5Art. 6Art. 7Art. 12 | €50,000 |
| 2022-04-28 | Nos s.r.l.s. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 13 | €20,000 |
| 2022-04-07 | Made in Italy s.r.l.s. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 6Art. 7Art. 15Art. 17 | €20,000 |
| 2021-12-21 | FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 7Art. 13 | €2,000 |
| 2021-12-17 | CLUB DEPORTIVO RITMO DE ANDALUCÍA Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 7Art. 13 | €4,000 |
| 2021-11-23 | Icelandic Ministry of Industry and Innovation Non-compliance with general data processing principles | 🇪🇺 Icelandic data protection authority ('Persónuvernd') | Art. 5Art. 6Art. 7Art. 13 | €51,000 |
| 2021-10-11 | MAF.COM ESQUI CLUB Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 7 | €10,000 |
| 2021-09-16 | Sky Italia S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €3,296,326 |
| 2021-08-02 | Unser Ö-Bonus Club GmbH Insufficient legal basis for data processing | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 6Art. 7Art. 12 | €500,000 |
| 2021-06-24 | Magazine publisher Insufficient legal basis for data processing | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 7Art. 12Art. 21 | €8,500 |
| 2021-05-13 | Iren Mercato S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7 | €2,856,169 |
| 2021-04-15 | S.C. Tip Top Food Industry S.R.L Insufficient legal basis for data processing | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 5Art. 6Art. 7 | €5,000 |
| 2021-03-25 | Fastweb S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €4,500,000 |
| 2021-03-25 | OneDirect Srl Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 6Art. 7Art. 30Art. 31 | €30,000 |
| 2021-01-27 | Family Service / N.D.P.K. nv. Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 5Art. 6Art. 7Art. 13 | €50,000 |
| 2020-12-10 | Borjamotor, S.A. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 7 | €4,000 |
| 2020-11-12 | Vodafone Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 15 | €12,251,601 |
| 2020-09-22 | Iweb Internet Learning, S.L. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 7Art. 12Art. 13 | €7,800 |
| 2020-08-10 | Cavauto S.R.L. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7 | €10,000 |
| 2020-07-23 | El Real Sporting de Gijón S.A.D. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 7 | €5,000 |
| 2020-07-14 | Operator of CCTV of a residential building Insufficient legal basis for data processing | 🇪🇺 Belgian Data Protection Authority (APD) | Art. 6Art. 7 | €5,000 |
| 2020-07-14 | Legal Person Insufficient legal basis for data processing | 🇪🇺 Czech Data Protection Auhtority (UOOU) | Art. 5Art. 6Art. 7Art. 13 | €400 |
| 2020-07-13 | Merlini s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 28 | €200,000 |
| 2020-04-23 | Estee Lauder Romania Insufficient legal basis for data processing | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 6Art. 7Art. 9 | €3,000 |