Article 9 GDPR — enforcement

Cited in 233 decisions · €44.1M total fines · median €15,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (121)

Read Article 9 GDPR →

Date ↓	Company / party	Authority	Articles	Fine
2023-01-01	Private individual Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Baden-Wuerttemberg	Art. 6 Art. 9	€2,000
2023-01-01	Supermarket Insufficient legal basis for data processing	🇪🇺 Data Protection Authority of Brandenburg	Art. 6 Art. 9	—
2022-12-27	Company Insufficient legal basis for data processing	🇪🇺 Deputy Data Protection Ombudsman	Art. 9	€122,000
2022-12-15	Eurosanità S.P.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€120,000
2022-12-15	Azienda Universitaria Friuli Centrale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Friuli Occidentale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Giuliano Isontina Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Comune di Vicchio Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€8,000
2022-12-15	Comune di Bracciano Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€6,000
2022-12-15	Comune di Borgia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 37	€5,000
2022-12-15	Scuola Statale Secondaria di I^ grado 'Bianco-Pascol' Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€3,000
2022-12-02	Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 9 Art. 13	€3,600
2022-12-01	A.R.N.A.S. Civico Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€6,000
2022-11-30	PIONIER (law firm) Insufficient legal basis for data processing	🇪🇺 Polish National Personal Data Protection Office (UODO)	Art. 5 Art. 6 Art. 9	€9,600
2022-11-24	Società Lombarda Sport s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€4,000
2022-11-24	Private individual Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 32	€1,000
2022-11-10	Azienda Usl Valle d'Aosta Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25 Art. 32	€40,000
2022-11-10	Sportitalia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 13 Art. 30	€20,000
2022-11-02	Portuguese National Statistical Institute Non-compliance with general data processing principles	🇪🇺 Portuguese Data Protection Authority (CNPD)	Art. 5 Art. 9 Art. 12 Art. 13	€4,300,000
2022-10-20	Azienda Ospedaliero-Universitaria Careggi di Firenze Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€9,000
2022-10-20	I.S.P.R.O. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€7,000
2022-10-04	Easylife Ltd. Insufficient legal basis for data processing	🇪🇺 Information Commissioner (ICO)	Art. 5 Art. 6 Art. 9 Art. 13	€1,547,000
2022-09-15	Lazio Region Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€100,000
2022-09-01	Liceo Statale 'Edoardo Amaldi” Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€4,000
2022-08-01	LAST LAP, S.L. Insufficient legal basis for data processing	🇪🇺 Spanish Data Protection Authority (aepd)	Art. 6 Art. 9	€9,600

← previous 126–150 of 233 next →