Article 88 GDPR — enforcement

Cited in 32 decisions · €6.9M total fines · median €13,500 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (17)

Read Article 88 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2026-07-16	Italian Garante sanctions Calabrian agency for location tracking of remote workers	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€50,000
2026-06-18	Garante: Piaggio violated GDPR by accessing former employees' emails in disciplinary probe	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 123 Art. 12 Art. 17 Art. 6	€460,000
2026-05-28	Italian DPA: vehicle tracking by Liguria Health Agency lawful, information duties met	🇮🇹 Garante per la protezione dei dati personali (Italy)	Art. 51 Art. 5 Art. 51 Art. 51	€6,000
2026-04-17	Io e te s.r.l.s. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-03-26	Business Owner Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-03-26	Copacabana s.r.l. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-03-26	Euro Bangla Minimarket in Jesi Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 88	€1,000
2026-03-20	Austrian DSB rules 360-degree feedback unlawful without specific works agreement	🇦🇹 DSB (Austria)	Art. 88 Art. 61 Art. 6 Art. 61	—
2026-03-12	ITAS Mutua Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€50,000
2026-02-12	Comune di Coccaglio Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€6,000
2026-02-12	Sole Trader Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13 Art. 88	€2,000
2026-02-12	Comune di Monterotondo Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88	€2,000
2026-01-29	Ministero della Cultura Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2026-01-29	Istituto San Giuseppe La Salle di Milano Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€12,000
2025-12-18	Anticimex s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 15	€40,000
2025-10-23	Comune di Curtarolo Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2025-10-23	Comune di Curtarolo Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€15,000
2025-07-10	Magna PT S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€50,000
2025-07-10	Magna PT S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€50,000
2025-05-21	Autostrade per l’Italia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 88	€420,000
2025-05-21	Autostrade per l’Italia S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 88	€420,000
2025-04-29	Regione Lombardia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 25 Art. 28	€50,000
2025-04-29	Regione Lombardia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 25 Art. 28	€50,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2025-04-10	Eastern Parma Apennine Mountain Community Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000

1–25 of 32 next →