▲ Enforcement Tracker
3,505 GDPR enforcement decisions from 66 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.4B
+305% vs previous year
Decisions · last 12 months
535
45 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2020-11-26 | Concentrix Cvg Italy s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €20,000 |
| 2020-11-26 | Reti Televisive Italiane S.p.a. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5 | €10,000 |
| 2020-11-26 | Charly Mike s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €3,000 |
| 2020-11-23 | Burgo Group S.p.A Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €20,000 |
| 2020-11-12 | Vodafone Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 15 | €12,251,601 |
| 2020-10-29 | Gaypa s.r.l. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13 | €20,000 |
| 2020-10-29 | Borgo Fonte Scura s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €4,000 |
| 2020-10-26 | Università Campus Bio-medico di Roma (Polyclinic) Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9 | €20,000 |
| 2020-09-30 | Azienda Ospedaliera di Rilievo Nazionale 'Antonio Cardarelli' (Private Hospital) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13Art. 28 | €80,000 |
| 2020-09-30 | Scanshare s.r.l. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 32 | €60,000 |
| 2020-09-07 | Istituto Comprensivo Statale Crucoli Torretta Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 32 | €2,000 |
| 2020-09-03 | Comune di Casaloldo Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2020-08-10 | Cavauto S.R.L. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7 | €10,000 |
| 2020-08-10 | Community of Baronissi Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €10,000 |
| 2020-08-05 | School Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2020-08-04 | Mapei S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €15,000 |
| 2020-08-04 | Supermarket Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €1,000 |
| 2020-07-30 | Community of Manduria Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €2,000 |
| 2020-07-29 | Region of Campania Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €4,000 |
| 2020-07-29 | Community of San Giorgio Jonico Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6 | €3,000 |
| 2020-07-13 | Wind Tre S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 24 | €16,700,000 |
| 2020-07-13 | Iliad Italia S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 25 | €800,000 |
| 2020-07-13 | Merlini s.r.l. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 28 | €200,000 |
| 2020-07-02 | Mapei S.p.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 12Art. 13Art. 15 | €15,000 |
| 2020-03-06 | Liceo Artistico Statale di Napoli Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9 | €4,000 |