▲ Enforcement Tracker
3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
631
53 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-06-24 | General Hospital of the University of Larissa Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 14Art. 15 | €7,000 |
| 2025-06-23 | Piraeus Bank S.A. Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6 | €50,000 |
| 2025-06-23 | Piraeus Bank S.A. Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6 | €50,000 |
| 2025-01-10 | National Bank of Greece S.A Insufficient technical and organisational measures to ensure information security | 🇬🇷 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 15Art. 25Art. 32 | €120,000 |
| 2024-05-27 | Ministry of Interior (Greece) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5 | €400,000 |
| 2024-05-27 | Member of the European Parliament Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 14 | €40,000 |
| 2024-02-28 | Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 32 | €2,995,140 |
| 2023-11-10 | Piraeus Leasing S.M.S.A. Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 15 | €20,000 |
| 2023-10-11 | GREECE DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5 | €1,000 |
| 2023-09-25 | Athens Urban Transport Organization Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 25Art. 35 | €50,000 |
| 2023-06-12 | Piraeus Bank Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 15Art. 25 | €210,000 |
| 2023-02-02 | Piraeus Bank Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 33Art. 34 | €30,000 |
| 2023-02-02 | Vodafone Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 13 | €10,000 |
| 2022-09-09 | Greek HDPA: Classroom video surveillance at school unlawful; oral notice insufficient | 🇬🇷 HDPA (Greece) | Art. 51Art. 5Art. 51Art. 52 | €15,000 |
| 2022-09-09 | School Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 12Art. 13 | €15,000 |
| 2022-08-08 | IDIKA SA Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 25 | €5,000 |
| 2022-08-03 | Private Polyclinic and Diagnostic Centre of Pyle Axiou Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5 | €30,000 |
| 2022-07-19 | DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 12 | €20,000 |
| 2022-04-04 | Piraeus Bank Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 33Art. 34 | €10,000 |
| 2022-04-04 | Mayor Insufficient legal basis for data processing | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5 | €5,000 |
| 2022-03-09 | Foreign language school Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 13 | €2,000 |
| 2022-03-09 | Employer Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 13 | €2,000 |
| 2022-01-27 | Cosmote Mobile Telecommunications S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 13Art. 14Art. 25 | €6,000,000 |
| 2021-09-03 | Rhodes Municipal Transport Company Insufficient fulfilment of data subjects rights | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 12Art. 15 | €8,000 |
| 2021-08-26 | NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. Non-compliance with general data processing principles | 🇪🇺 Hellenic Data Protection Authority (HDPA) | Art. 5Art. 6Art. 12Art. 17 | €5,000 |