Article 83 GDPR — enforcement

Cited in 18 decisions · €38.0M total fines · median €20,000 · top authority: 🇮🇹Garante per la protezione dei dati personali (Italy) (5)

Read Article 83 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-16	AEPD sanctions Iberdrola Clientes for improper identity verification and unauthorized	🇪🇸 AEPD (Spain)	Art. 24 Art. 32 Art. 321 Art. 582	€1,000,000
2026-09-16	AEPD fines DIGI Telecom for issuing duplicate SIM to impersonator without consent	🇪🇸 AEPD (Spain)	Art. 52 Art. 5 Art. 61 Art. 6	€140
2026-08-26	Italian DPA: Il Fatto Quotidiano must erase data subject's personal data from cable car	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 83	€23,750
2026-08-18	Austrian DSB: Employee who shared customer's phone number acted as GDPR controller	🇦🇹 DSB (Austria)	Art. 51 Art. 5 Art. 51 Art. 47	€1,000
2026-07-24	HDPA (Greece) - 33/2020	🇬🇷 HDPA (Greece)	Art. 47 Art. 4 Art. 5 Art. 12	€2,000
2026-07-17	CNIL (France) - SAN-2022-011	🇫🇷 CNIL (France)	Art. 12 Art. 14 Art. 15 Art. 21	€1,000,000
2026-07-16	Garante per la protezione dei dati personali (Italy) - 10192784	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 1 Art. 51 Art. 5 Art. 51	€16,000
2026-05-22	Private individual Insufficient cooperation with supervisory authority	🇵🇱 Polish National Personal Data Protection Office (UODO)	Art. 58 Art. 83	€6,292
2026-03-07	Italian DPA finds Cerved Group failed to disclose creditworthiness scores in Art. 15	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 12 Art. 15	€400,000
2026-02-20	SC Hayat Dent SRL Insufficient cooperation with supervisory authority	🇷🇴 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 83	€2,000
2026-02-05	Tensa Art Design S.A Insufficient cooperation with supervisory authority	🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)	Art. 58 Art. 83	€20,000
2026-01-16	Garante per la protezione dei dati personali (Italy) - 10214411	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 61 Art. 6	€1,500
2023-01-16	DPC (Ireland) reprimands Kildare County Council over surveillance tech and CCTV compliance	🇮🇪 DPC (Ireland)	Art. 2 Art. 5 Art. 6 Art. 13	€50,000
2022-10-28	Danish DPA fines Sirius Lawyers DKK 500,000 for inadequate security after hacker attack	🇩🇰 Datatilsynet (Denmark)	Art. 51 Art. 5 Art. 9 Art. 24	€500,000
2022-06-09	Italian DPA sanctions Municipality of Policoro for CCTV signage, retention and DPO	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 52	€26,000
2021-08-05	DSB (Austria) - 2021-0.518.795	🇦🇹 DSB (Austria)	Art. 42 Art. 4 Art. 47 Art. 410	€600
2020-12-07	CNIL (France) - SAN-2020-013	🇫🇷 CNIL (France)	Art. 6 Art. 9 Art. 83 Art. 94	€35,000,000
2019-09-03	CNPD (Portugal) - Deliberação 2019/494	🇵🇹 CNPD (Portugal)	Art. 288 Art. 2 Art. 3 Art. 56	—