Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2021-11-24 | UNION FINANCIERA ASTURIANA S.A. E.F.C. | €9K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2023-05-02 | NAGA Markets Europe Ltd | €9K | GDPR | Cypriot Data Protection Commissioner | Cyprus | Failure to comply with data processing principles | --Articles: Art. 5 (1) f) GDPR, Art. 32 (1) b), d) GDPR |
| 2019-05-08 | Private individual | €9K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | Video surveillance was used to monitor employees.Video surveillance was used to monitor employees. Articles: Art. 5 (1) c) GDPR |
| 2022-09-05 | Prodesspa Decoratius i Pintures, S.L. | €9K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2022-01-11 | Educando Juntos SL | €9K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR, Art. 17 GDPR |
| 2021-09-13 | Website operator | €9K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR, Art. 13 GDPR |
| 2020-03-10 | Breiðholt School | €9K | GDPR | Icelandic Data Protection Authority ('Persónuvernd') | Iceland | Failure to implement sufficient measures to ensure information security | A teacher had sent an email to parents and students that contained an attachment...A teacher had sent an email to parents and students that contained an attachment that had detailed information on the well-being and academic performance of all students. Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2019-07-17 | Budapest Environs Regional Court | €9K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2021-06-24 | Magazine Publisher | €9K | GDPR | Deputy Data Protection Ombudsman | Finland | Insufficient fulfilment of information obligations | --Articles: Art. 5 (1) a) GDPR, Art. 7 (2), (4) GDPR, Art. 12 (2) GDPR, Art. 21 (2) GDPR, Art. 24 (1) GDPR, Art. 28 (1), (3) GDPR |
| 2022-04-29 | Telemarketing Company | €8K | GDPR | Deputy Data Protection Ombudsman | Finland | Non-cooperation with Data Protection Authority | --Articles: Art. 58 (2) GDPR |
| 2022-04-13 | Ramona Films, S.L. | €8K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR, Art. 22 (2) LSSI |
| 2020-09-11 | Private Person | €8K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Failure to comply with data processing principles | --Articles: Art. 5 GDPR |
| 2022-04-22 | Political party | €8K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (2) GDPR, Art. 32 (1) a), b) GDPR, Art. 32 (2) GDPR |
| 2022-12-21 | Hotel | €8K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) e) GDPR, Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 31 GDPR |
| 2022-03-10 | Agenzia Regionale per la Tutella dell’Ambiente dell’Abruzzo | €8K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 2-ter Codice della privacy, Art. 2-octies Codice della privacy |
| 2020-01-01 | Unknown | €8K | GDPR | Lithuanian Data Protection Authority (VDAI) | Lithuania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 35 GDPR |
| 2019-10-16 | Iberdrola Clientes | €8K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to cooperate with supervisory authority | --Articles: Art. 31 GDPR |
| 2022-10-24 | ADSL HOUSE, S.L. | €8K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 48 (1) b) LGT, Art. 21 GDPR, Art. 23 (4) LOPDGDD |
| 2020-03-20 | Mihou Dimitra Centre | €8K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Information obligation non-compliance | --Articles: Art. 15 GDPR, Art. 58 GDPR |
| 2021-01-14 | Agenzia regionale protezione ambientale Campania (ARPAC) | €8K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2021-10-14 | Health Protection Agency of Sardinia (ATS) | €8K | GDPR | Italian Data Protection Authority (Garante) | Italy | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR, Art. 9 GDPR |
| 2022-05-17 | Tigers Market, S.L. | €8K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects’ rights protection safeguards | --Articles: Art. 48 (1) b) LGT, Art. 21 GDPR, Art. 23 (4) LOPDGDD |
| 2022-09-08 | Realmedia Network SA | €8K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information | --Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR |
| 2021-09-02 | Rhodes Municipal Transport Company | €8K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 5 (1) c) GDPR, Art. 12 (3) GDPR, Art. 15 GDPR |
| 2022-12-15 | Comune di Vicchio | €8K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 9 (2), (4) GDPR |