Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2021-11-30 | ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 17 (1) GDPR, Art. 21 LSSI |
| 2020-03-16 | Centro de Estudio Dirigidos Delta, S.L. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) (f) GDPR |
| 2022-03-21 | English School Staff Union (ESSA) | €5K | GDPR | Cypriot Data Protection Commissioner | Cyprus | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR |
| 2021-11-01 | S.P.E.E.H. Hidroelectrica S.A. | €5K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 (1) b), (2) GDPR |
| 2021-12-26 | Medical Clinic | €5K | GDPR | Deputy Data Protection Ombudsman | Finland | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 12 (1), (2), (3), (4) GDPR, Art. 13 (1), (2) GDPR, Art. 15 (1), (3) GDPR, Art. 25 GDPR |
| 2022-04-04 | Mayor | €5K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR |
| 2022-11-10 | Cisterna di Latina Municipality | €5K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 37 GDPR |
| 2022-08-16 | RODALI GESTION INMOBILIARIA, S.L. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2023-05-03 | BANQUETES SANTA ANA, S.L. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2019-03-01 | State Hospital | €5K | GDPR | Cypriot Data Protection Commissioner | Cyprus | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 15 GDPR |
| -- | Vodafone Espana | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with processing principles | --Articles: Art. 5 (1) d) GDPR |
| 2020-06-09 | Consulting de Seguridad e Investigacion Miora Dp Madrid S.L. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2022-09-06 | EDYTE SA | €5K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 29 GDPR |
| 2022-08-08 | IDIKA SA | €5K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Failure to comply with data processing principles | --Articles: Art. 5 (1) e) GDPR, Art. 25 GDPR |
| 2019-01-23 | Small shipping company | €5K | GDPR | Data Protection Authority | Germany | https://dataprivacy.foxrothschild.com/2019/01/articles/european-union/hessian-dpa-fines-shipping-company-for-missing-data-processing-agreement/ | --Articles: Art. 28 of the GDPR |
| 2021-11-30 | ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 17 (1) GDPR, Art. 21 LSSI |
| 2021-09-16 | Comune di Montalbano Jonico | €5K | GDPR | Italian Data Protection Authority (Garante) | Italy | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR, Art. 9 (1), (2), (4) GDPR, Art. 2-ter (1), (3) Codice della privacy, Art. 2-septies (8) Codice della privacy |
| 2021-01-01 | Private individual | €5K | GDPR | Data Protection Authority of Saxony | Germany | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR |
| 2022-02-01 | Etterforsker1 Gruppen AS | €5K | GDPR | Norwegian Supervisory Authority (Datatilsynet) | Norway | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2022-09-21 | Unknown | €5K | GDPR | Data Protection Authority of Baden-Wuerttemberg | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-01-31 | INCOPROSOL, S.L. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR |
| 2020-08-04 | National Institute for Social Security – Department of the Province of Brescia | €5K | GDPR | Italian Data Protection Authority (Garante) | Italy | Non-compliance with lawful basis for data processing | --Articles: Art. 15 GDPR |
| 2020-07-23 | El Real Sporting de Gijon S.A.D. | €5K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR, Art. 7 GDPR |
| 2020-11-24 | Dada Creation S.R.L. | €5K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR, Art. 33 GDPR |
| 2021-09-16 | La Prima S.r.l. | €5K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 24 GDPR, Art. 25 GDPR |