Article 9 GDPR — enforcement

Cited in 249 decisions · €79.6M total fines · median €13,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (121)

Read Article 9 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2023-09-28	Ministero dell'Ambiente e della Sicurezza Energetica Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€5,000
2023-09-26	Phyisician Non-compliance with general data processing principles	🇪🇺 Austrian Data Protection Authority (dsb)	Art. 5 Art. 9	€10,000
2023-09-25	FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 9 Art. 13	€17,000
2023-09-18	SAF LOGISTICS Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 9 Art. 10 Art. 31	€200,000
2023-09-14	Nimbus s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13	€5,000
2023-08-31	Mednow Medical Center di Giugni Marco Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 12 Art. 15	€10,000
2023-07-18	Azienda Socio Sanitaria Territoriale Ovest Milanese Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€12,000
2023-06-27	Creditinfo Lánstraust hf. Insufficient legal basis for data processing	🇪🇺 Icelandic data protection authority ('Persónuvernd')	Art. 5 Art. 6 Art. 8 Art. 9	€257,000
2023-06-27	eCommerce 2020 ApS Insufficient legal basis for data processing	🇪🇺 Icelandic data protection authority ('Persónuvernd')	Art. 5 Art. 6 Art. 8 Art. 9	€51,000
2023-06-27	Almennri innheimtu ehf Insufficient legal basis for data processing	🇪🇺 Icelandic data protection authority ('Persónuvernd')	Art. 5 Art. 6 Art. 8 Art. 9	€24,000
2023-06-16	Irish Departement of Health Non-compliance with general data processing principles	🇪🇺 Data Protection Authority of Ireland	Art. 5 Art. 6 Art. 9	€22,500
2023-06-08	KG COM Non-compliance with general data processing principles	🇪🇺 French Data Protection Authority (CNIL)	Art. 5 Art. 6 Art. 9 Art. 12	€150,000
2023-06-07	Azienda Tutela della Salute della Sardegna Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 2	€5,000
2023-06-01	Ew Business Machines S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 114	€20,000
2023-06-01	Azienda Usl Toscana Sud Est. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25 Art. 2	€20,000
2023-06-01	Thin Srl Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13	€15,000
2023-06-01	Camedi s.r.l. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€10,000
2023-04-27	Roma Capitale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 28 Art. 29	€176,000
2023-04-27	Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€15,000
2023-04-14	Citynews S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€15,000
2023-04-13	Azienda socio sanitaria locale n. 3 di Nuoro Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€13,000
2023-04-13	Comune di Cogollo del Cengio Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€3,000
2023-04-04	Real Federación Española de Tenis de Mesa Insufficient fulfilment of information obligations	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 9	€10,000
2023-03-23	Azienda socio-sanitaria locale n. 1 di Sassari Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€4,000
2023-03-02	Azienda sanitaria locale di Bari Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25	€50,000

← previous 101–125 of 249 next →