Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
11 fines found
Total: $7.1M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2022-11-02 | Portuguese National Statistical Institute | €4.3M | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 28 (1), (6), (7) GDPR, Art. 35 (1), (2), (3) b) GDPR, Art. 44 GDPR, Art. 46 (2) GDPR |
| 2021-12-21 | Lisbon City Council | €1.3M | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a), c), e) GDPR, Art. 6 GDPR, Art. 9 (1) a) GDPR, Art. 13 (1), (2) GDPR, Art. 35 (3) GDPR |
| 2018-07-17 | Hospital | €400K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2018-07-17 | Hospital | €400K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Failure to implement sufficient measures to ensure information security | The hospital was found to create fake doctor profiles for the personnel to unlaw...The hospital was found to create fake doctor profiles for the personnel to unlawfully access patient data. The management system found 985 registered doctors when the hospital only had 296 doctors. Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2022-11-02 | Setubal Municipality | €180K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) e), f) GDPR, Art. 13 (1), (2) GDPR, Art. 37 (1), (7) GDPR |
| 2019-02-05 | Not available | €20K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with lawful basis for data processing | --Articles: Art. 15 GDPR |
| 2019-02-05 | Not available | €20K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with lawful basis for data processing | Not available.Not available. Articles: Art. 15 GDPR |
| 2019-03-25 | Not available | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with subjects' rights protection safeguards | Not availableNot available Articles: Art. 15 GDPR |
| 2019-03-19 | Not known | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Information obligation non-compliance | No further information is available.No further information is available. Articles: Art. 13 GDPR |
| 2019-03-25 | Not available | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 15 GDPR |
| 2019-03-19 | Not known | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Information obligation non-compliance | --Articles: Art. 13 GDPR |