▲ Enforcement Tracker

3,505 GDPR enforcement decisions from 66 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months

€2.4B

+305% vs previous year

Decisions · last 12 months

535

45 per month avg

Largest · last 90 days

€825.0M

Uber Technologies Inc. · The Netherlands

Most active authority

Italian Data Protection Authority (Garante)

116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct

reset

Date ↓	Company / party	Authority	Articles	Fine
2021-09-16	Ciechi Ardizzone Gioeni di Catania Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 35	€5,000
2021-09-16	Farpa s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 88 Art. 114	€1,000
2021-07-22	Deliveroo Italy s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 22 Art. 25	€2,500,000
2021-07-22	Roma Capitale Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 25	€800,000
2021-07-22	Atac s.p.a. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30 Art. 32	€400,000
2021-07-22	Regione Lombardia Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€200,000
2021-07-22	Flowbird Italia s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 30	€30,000
2021-06-10	Foodinho s.r.l. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 22 Art. 25	€2,600,000
2021-06-10	Aeroporto Guglielmo Marconi di Bologna S.p.a. Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 25 Art. 32	€40,000
2021-06-10	Dentist Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5	€20,000
2021-05-27	Azienda Provinciale per i Servizi Sanitari di Trento Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€150,000
2021-05-27	Azienda Usl della Romagna Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9	€120,000
2021-05-13	Iren Mercato S.p.A. Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7	€2,856,169
2021-05-13	Comune di Bolzano Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9 Art. 13	€84,000
2021-05-13	Synlab Med srl Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 2	€20,000
2021-04-29	Santa Ninfa municipality Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€2,000
2021-04-21	Fondazione Policlinico Tor Vergata di Roma Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 13 Art. 25 Art. 32	€15,000
2021-04-15	Comune di Palermo Insufficient technical and organisational measures to ensure information security	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 25 Art. 32	€40,000
2021-04-15	Istituto Nazionale Previdenza Sociale (INPS) Insufficient fulfilment of data subjects rights	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€12,000
2021-04-15	Physician Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€5,000
2021-04-15	Società triveneta di chirurgia Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2021-03-25	Fastweb S.p.A. Non-compliance with general data processing principles	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 12	€4,500,000
2021-03-25	Convitto Nazionale Statale 'Giordano Bruno' di Maddaloni (boarding school) Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 2	€6,000
2021-03-25	Comune di Castellanza Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€4,000
2021-03-11	Planet Group Spa Insufficient legal basis for data processing	🇪🇺 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 21 Art. 12	€80,000

← previous 451–475 of 536 next →