▲ Enforcement Tracker
3,505 GDPR enforcement decisions from 66 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.4B
+305% vs previous year
Decisions · last 12 months
535
45 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-12-13 | Company Insufficient fulfilment of information obligations | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 12Art. 13 | €2,100 |
| 2022-12-13 | Manager of a real estate co-ownership Insufficient legal basis for data processing | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 5Art. 6Art. 12Art. 15 | €1,500 |
| 2022-12-13 | Company Insufficient fulfilment of information obligations | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 12Art. 13 | €1,400 |
| 2022-12-13 | Company Insufficient fulfilment of information obligations | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 12 | €1,000 |
| 2022-12-13 | Company Insufficient fulfilment of information obligations | 🇪🇺 National Commission for Data Protection (CNPD) | Art. 12Art. 13 | €700 |
| 2022-12-09 | Viking Line Oy Abp Non-compliance with general data processing principles | 🇪🇺 Deputy Data Protection Ombudsman | Art. 5Art. 12Art. 13Art. 15 | €230,000 |
| 2022-12-09 | Notary Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €8,000 |
| 2022-12-09 | Casa Rusu S.R.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Art. 25Art. 32 | €2,000 |
| 2022-12-09 | Private individual Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13 | €480 |
| 2022-12-09 | Private individual Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €120 |
| 2022-12-08 | FREE SAS Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 15Art. 17Art. 32 | €300,000 |
| 2022-12-08 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-08 | Jewelry manufacturer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €2,654 |
| 2022-12-07 | Fish market Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,185 |
| 2022-12-06 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-05 | Retailer Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €3,583 |
| 2022-12-05 | Betting place Insufficient fulfilment of information obligations | 🇪🇺 Croatian Data Protection Authority (azop) | Art. 27 | €1,991 |
| 2022-12-03 | INDECEMI, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €3,000 |
| 2022-12-03 | LORENT 2013, S.L Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2022-12-03 | Homeowners Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €300 |
| 2022-12-02 | Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 9Art. 13 | €3,600 |
| 2022-12-02 | CASA 7 PERSONAL SHOPPER, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €3,500 |
| 2022-12-01 | Lazio Region Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 113Art. 114 | €100,000 |