Article 9 GDPR — enforcement

Cited in 279 decisions · €82.9M total fines · median €12,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (121)

Date ↓	Company / party	Authority	Articles	Fine
2019-09-03	CNPD (Portugal) - Deliberação 2019/494	🇵🇹 CNPD (Portugal)	Art. 288 Art. 2 Art. 3 Art. 56	—
2019-08-20	School in Skellefteå Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Sweden	Art. 5 Art. 9 Art. 35 Art. 36	€18,630
2019-04-08	Medical centers Insufficient legal basis for data processing	🇪🇺 Data Protection Commision of Bulgaria (KZLD)	Art. 5 Art. 9 Art. 6	€510
2017-11-08	Norwegian DPA: Legelisten.no may process healthcare reviews without prior consent	🇳🇴 Datatilsynet (Norway)	Art. 411 Art. 4 Art. 51 Art. 5	—

← previous 276–279 of 279