Article 7 GDPR — enforcement

Cited in 106 decisions · €58.2M total fines · median €30,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (55)

Date ↓	Company / party	Authority	Articles	Fine
2020-01-01	Operator of a ballet school Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 5 Art. 6 Art. 7	—
2020-01-01	Ski rental company Non-compliance with general data processing principles	🇪🇺 Czech Data Protection Auhtority (UOOU)	Art. 5 Art. 6 Art. 7 Art. 12	—
2019-12-16	SC Enel Energie S.A. (Electricity Distributor) Insufficient legal basis for data processing	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7 Art. 21	€6,000
2019-12-13	Entirely Shipping & Trading S.R.L. Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7 Art. 9	€5,000
2019-12-13	Entirely Shipping & Trading S.R.L. Non-compliance with general data processing principles	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 5 Art. 6 Art. 7	€5,000
2019-06-11	Professional Football League (LaLiga) Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 5 Art. 7	€250,000

← previous 101–106 of 106