▲ Enforcement Tracker
3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
623
52 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-03-27 | Istituto di Istruzione Superiore 'P. Galluppi' Tropea Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €4,000 |
| 2025-03-13 | Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13Art. 25 | €50,000 |
| 2025-03-13 | Interflora Italia S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 15 | €40,000 |
| 2025-03-13 | Encore Thermoengineering s.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 17 | €20,000 |
| 2025-03-13 | G@S Telecomunicazioni di Losito Lucia Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 13 | €15,000 |
| 2025-03-13 | l’Istituto Alberghiero Mediterraneo di Pulsano Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2025-03-13 | Municipality of Roccaraso Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2025-01-16 | Realmaps S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €100,000 |
| 2025-01-16 | San Pio Hospital in Benevento Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €6,000 |
| 2025-01-16 | Alessandro Volta Classical and Scientific High School in Como Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2025-01-16 | Macelleria La Costata s.r.I.s Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13 | €1,500 |
| 2025-01-16 | BAR GIOIA Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5 | €600 |
| 2025-01-16 | Pro Loco Tourist Association of Cittareale Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €600 |
| 2024-12-12 | Physician Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 2 | €20,000 |
| 2024-11-27 | E.ON Energia spa Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €892,783 |
| 2024-11-13 | Foodinho Srl Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 12 | €5,000,000 |
| 2024-11-13 | Illumia Spa Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 24 | €678,897 |
| 2024-11-02 | OpenAI OpCo LLC Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €15,000,000 |
| 2024-09-12 | Sky Italia S.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 130 | €842,062 |
| 2024-09-12 | Private individual Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €400 |
| 2024-07-17 | Hera Comm S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 15Art. 24 | €5,000,000 |
| 2024-07-17 | Selectra S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 88Art. 114 | €80,000 |
| 2024-07-04 | Postel S.p.A Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 25Art. 32Art. 33 | €900,000 |
| 2024-06-20 | Fastweb S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €1,000,000 |
| 2024-06-20 | Municipality of Nepi Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 28Art. 2 | €20,000 |