Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2020-12-22 | Iberdrola Clientes, SAU | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 48 (1) b) LGT, Art. 21 GDPR, Art. 23 (4) LOPDGDD |
| 2021-08-30 | Furnishyourspace S.L. | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 21 (4) GDPR |
| 2021-11-25 | Società H San Raffaele Resnati s.r.l. | €6K | GDPR | Italian Data Protection Authority (Garante) | Italy | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR |
| 2022-12-15 | Comune di Bracciano | €6K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, art. 6 GDPR, Art. 9 GDPR, Art. 2-ter Codice della privacy, Art. 2-septies (8) Codice della privacy |
| 2019-10-31 | Jocker Premium Invex | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | Postal advertisements and commercial offers were sent by Jocker Premium Invex to...Postal advertisements and commercial offers were sent by Jocker Premium Invex to a registrant to a local census, even though the registrant did not consent to receive such advertisements and offers. Articles: Art. 6 GDPR |
| 2020-10-22 | Cyprus Police | €6K | GDPR | Cypriot Data Protection Commissioner | Cyprus | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR |
| 2020-02-25 | Casa Gracio Operation | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2020-03-19 | Unknown Company | €6K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR, Art. 15 GDPR |
| 2022-04-22 | Physician | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-08-28 | SOLIVESA MASTER FRANCHISE S.L. | €6K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 28 GDPR, Art. 48 (1) b) GDPR |
| 2021-01-05 | Śląski Uniwersytet Medyczny (Medical University of Silesia) | €6K | GDPR | Polish National Personal Data Protection Office (UODO) | Poland | Failure to implement sufficient measures to ensure information security | --Articles: Art. 33 (1) GDPR, Art. 34 (1) GDPR |
| 2021-10-06 | Unknown | €5K | GDPR | National Commission for Data Protection (CNPD) | Luxembourg | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR |
| 2022-11-15 | News service | €5K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR, Art. 7 (2), 4) GDPR, Art. 12 GDPR |
| 2019-09-03 | Telecommunication service provider | €5K | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | A fine of €5,113 was imposed on a national telecom company for the unlawful proc...A fine of €5,113 was imposed on a national telecom company for the unlawful processing of the personal data of a citizen. The personal data of the individual was unlawfully accessed and processed in order to cancel a contract. Articles: Art. 6 GDPR |
| 2019-09-03 | Telecommunication service provider | €5K | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2019-10-08 | Interior Ministry | €5K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2019-10-08 | Interior Ministry | €5K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | The Bulgarian Interior Ministry was fined due to the unlawful processing of the ...The Bulgarian Interior Ministry was fined due to the unlawful processing of the personal data of a citizen. The Interior Ministry unlawfully sent the personal data of the citizen to the Togolese Republic. Articles: Art. 6 (1) GDPR |
| 2020-01-06 | Utility company | €5K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2019-03-26 | A.P. EOOD | €5K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR |
| 2019-03-26 | A.P. EOOD | €5K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | The personal data administrator unlawfully processed personal data of subject D....The personal data administrator unlawfully processed personal data of subject D.D related to an Employment Contract, while the subject was imprisoned. Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR |
| 2021-04-27 | PNP S.A. | €5K | GDPR | Polish National Personal Data Protection Office (UODO) | Poland | Non-cooperation with Data Protection Authority | --Articles: Art. 31 GDPR, Art. 58 (1) e) GDPR |
| 2020-06-08 | Municipal employee | €5K | GDPR | Belgian Data Protection Authority (APD) | Belgium | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2019-11-28 | City councilor | €5K | GDPR | Belgian Data Protection Authority (APD) | Belgium | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2018-12-17 | Kolibri Image Regina und Dirk Maass GbR | €5K | GDPR | Data Protection Authority of Hamburg | Germany | Failure to collect sufficient data processing consent | --Articles: Art. 28 (3) GDPR |
| 2019-12-03 | Linea Directa Aseguradora | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |