▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.5B

+124% vs previous year

Decisions · last 12 months

623

52 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2023-02-23	Ediscom S.p.a. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 14	€300,000
2023-01-26	Azienda Ospedaliera Bianchi Melacrino Morelli Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 32 Art. 75	€7,000
2023-01-26	Misterbianco municipality Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€5,000
2023-01-26	Azienda ULSS n.5 Polesana Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€5,000
2023-01-11	Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€6,000
2023-01-11	Azienda Ospedale-Università Padova Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€5,000
2022-12-15	Edison Energia S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€4,900,000
2022-12-15	Eurosanità S.P.A. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 32	€120,000
2022-12-15	Azienda Universitaria Friuli Centrale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Giuliano Isontina Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Azienda Universitaria Friuli Occidentale Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 14 Art. 35	€55,000
2022-12-15	Verizon Connect Italy S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 28	€30,000
2022-12-15	Comune di Vicchio Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€8,000
2022-12-15	Comune di Bracciano Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€6,000
2022-12-15	Comune di Borgia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 37	€5,000
2022-12-15	Scuola Statale Secondaria di I^ grado 'Bianco-Pascol' Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 12	€3,000
2022-12-01	Lazio Region Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 113 Art. 114	€100,000
2022-12-01	A.R.N.A.S. Civico Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 2	€6,000
2022-12-01	Store owner (Joy Unique Collection) Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 114	€6,000
2022-12-01	Store owner (Woolen) Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 114	€3,000
2022-12-01	Store owner Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€2,000
2022-11-24	Areti spa Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 24	€1,000,000
2022-11-24	Società Lombarda Sport s.r.l. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€4,000
2022-11-24	Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€3,000
2022-11-24	STS Di Prisinzano s.r.l Insufficient fulfilment of information obligations	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€1,000

← previous 376–400 of 591 next →