▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

623

52 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2023-04-27	Benetton Group S.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 32	€240,000
2023-04-27	Roma Capitale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 28 Art. 29	€176,000
2023-04-27	Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€15,000
2023-04-27	Università degli studi di Cassino e del Lazio Meridionale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 10 Art. 2	€4,000
2023-04-27	Store owner Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€2,000
2023-04-27	Private individual Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€400
2023-04-14	Sorgenia S.p.a. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 25	€676,956
2023-04-14	Green Network S.p.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 25	€237,800
2023-04-14	Citynews S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€15,000
2023-04-13	TIM S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€7,631,175
2023-04-13	Mas s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€500,000
2023-04-13	Mas s.r.l.s. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 13	€200,000
2023-04-13	Azienda socio sanitaria locale n. 3 di Nuoro Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€13,000
2023-04-13	Comune di Cogollo del Cengio Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€3,000
2023-03-23	La Risorsa Umana.it s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 28	€40,000
2023-03-23	Bolzano municipality Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 25 Art. 32 Art. 33	€30,000
2023-03-23	Informatica Alto Adige Spa Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 32	€10,000
2023-03-23	Azienda socio-sanitaria locale n. 1 di Sassari Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€4,000
2023-03-09	Store owner Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 114	€3,000
2023-03-09	Aesse S.r.l.s. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€3,000
2023-03-09	Consorzio Concessioni Reti Gas S.c.a.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13	€2,000
2023-03-02	H&M Hennes & Mauritz s.r.l. EUR 50,000 Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 114	€50,000
2023-03-02	Azienda sanitaria locale di Bari Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25	€50,000
2023-03-02	Private individual Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 130	€5,000
2023-03-02	Razmataz Live s.r.l.. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 28	€1,000

← previous 351–375 of 591 next →