Article 9 GDPR — enforcement
Cited in 251 decisions · €79.9M total fines · median €14,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (121)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-09-16 | Comune di Montalbano Jonico Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 2 | €5,000 |
| 2021-08-05 | DSB Austria: sharing medical assessment with municipality lacked Art. 9(2) legal basis | 🇦🇹 DSB (Austria) | Art. 42Art. 4Art. 47Art. 410 | €600 |
| 2021-08-05 | Private individual Insufficient legal basis for data processing | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 9 | €600 |
| 2021-07-26 | Mercadona S.A. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 9Art. 12 | €2,520,000 |
| 2021-06-21 | UAB VS FITNESS Non-compliance with general data processing principles | 🇪🇺 Lithuanian Data Protection Authority (VDAI) | Art. 5Art. 9Art. 13Art. 30 | €20,000 |
| 2021-06-07 | MedHelp AB Non-compliance with general data processing principles | 🇪🇺 Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) | Art. 5Art. 6Art. 9Art. 13 | €1,200,000 |
| 2021-05-27 | Azienda Provinciale per i Servizi Sanitari di Trento Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €150,000 |
| 2021-05-27 | Azienda Usl della Romagna Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €120,000 |
| 2021-05-13 | Comune di Bolzano Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 13 | €84,000 |
| 2021-05-13 | Synlab Med srl Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 2 | €20,000 |
| 2021-04-15 | Physician Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €5,000 |
| 2021-04-15 | Società triveneta di chirurgia Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €2,000 |
| 2021-03-03 | Electricity Authority of Cyprus Insufficient legal basis for data processing | 🇪🇺 Cypriot Data Protection Commissioner | Art. 6Art. 9 | €40,000 |
| 2021-02-25 | Comune di Commezzadura Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €6,000 |
| 2021-02-25 | Azienda Ospedaliera Universitaria Careggi Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €6,000 |
| 2021-02-25 | Ministero dell’Istruzione, Ufficio Scolastico Regionale per il Lazio Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €4,000 |
| 2021-02-11 | Istituti ospedalieri bergamaschi Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 32 | €45,000 |
| 2021-02-11 | Fondazione di religione e di culto “Casa sollievo della sofferenza” Opera di San Pio da Pietrelcina Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €5,000 |
| 2021-01-27 | Azienda USL della Romagna Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 32 | €50,000 |
| 2021-01-27 | Azienda Ospedaliero Universitaria Senese Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €50,000 |
| 2021-01-27 | Azienda Ospedaliero Universitaria di Parma Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €10,000 |
| 2021-01-14 | Azienda sanitaria provinciale di Enna Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €30,000 |
| 2021-01-14 | Azienda Usl di Bologna Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €18,000 |
| 2021-01-01 | Private individual Non-compliance with general data processing principles | 🇪🇺 Austrian Data Protection Authority (dsb) | Art. 5Art. 9 | €600 |
| 2021-01-01 | Physician Insufficient legal basis for data processing | 🇪🇺 Data Protection Authority of Brandenburg | Art. 6Art. 9 | — |