Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2020-08-06 | GROW BEATS SL | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with processing principles | --Articles: Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR |
| 2020-08-05 | Restaurant | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR |
| 2020-10-03 | Avata Hispania, S.L. | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 28 (3) g) GDPR |
| 2020-10-15 | S.C. Marsorom S.R.L. | €3K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR |
| 2020-03-25 | eMag - Dante International | €3K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-compliance with lawful basis for data processing | The company in question, Dante International, failed to observe the right of a c...The company in question, Dante International, failed to observe the right of a customer to unsubscribe from commercial communications and sent a commercial e-mail to the client in spite of that. Articles: Art. 6 GDPR, Art. 21 GDPR |
| 2020-12-17 | Doctor | €3K | GDPR | French Data Protection Authority (CNIL) | France | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR, Art. 33 GDPR |
| 2020-09-17 | Grupo Carolizan | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR |
| 2019-11-26 | Modern Barber | €3K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-cooperation with Data Protection Authority | The company did not comply with measures imposed by the Data Protection Authorit...The company did not comply with measures imposed by the Data Protection Authority. Articles: Art. 58 GDPR |
| 2020-08-03 | Candidate for parliamentary elections | €3K | GDPR | Hellenic Data Protection Authority (HDPA) | Greece | Non-compliance with lawful basis for data processing | --Articles: Art. 15 GDPR |
| 2020-07-28 | Communal political association | €3K | GDPR | Belgian Data Protection Authority (APD) | Belgium | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 14 GDPR |
| 2022-09-16 | MARIELI GABRIELA, S.L. | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2021-07-29 | Universidad A Distancia De Madrid, S.A | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 17 (1) GDPR, Art. 21 LSSI |
| 2021-06-30 | Fundację Promocji Mediacji i Edukacji Prawnej Lex Nostra | €3K | GDPR | Polish National Personal Data Protection Office (UODO) | Poland | Information obligation non-compliance | --Articles: Art. 33 (1) GDPR, Art. 34 (1) GDPR |
| 2023-04-04 | Tensa Art Design SRL | €3K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 12 (3) GDPR |
| 2022-11-29 | Unknown company | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR, Art. 14 GDPR |
| 2021-09-15 | Société Nouvelle de l’Annuaire Français | €3K | GDPR | French Data Protection Authority (CNIL) | France | Failure to implement sufficient measures to ensure information security | --Articles: Art. 16 GDPR, Art. 17 GDPR, Art. 30 GDPR, Art. 31 GDPR |
| 2022-11-24 | 3000 | €3K | GDPR | Italian Data Protection Authority (Garante) | Italy | Art. 5 (1) GDPR, Art. 6 GDPR, Art. 2-ter Codice della privacy | --Articles: Ordine dei Medici Chirurghi e geli Odontoiatri della Provincia di Cagliari |
| 2021-09-24 | Unknown | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2021-07-27 | UST GLOBAL ESPANA, S.A. | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR |
| 2021-09-28 | Bar owner | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) b) GDPR |
| 2022-07-21 | Azienda Socio Sanitaria Territoriale Rhodense | €3K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2020-11-26 | Charly Mike s.r.l. | €3K | GDPR | Italian Data Protection Authority (Garante) | Italy | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR |
| 2022-11-03 | INDECEMI, S.L. | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) f) GDPR |
| 2022-02-22 | Hotel operator | €3K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR |
| 2022-02-22 | IAMSAT Muntenia SA | €3K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-compliance with lawful basis for data processing | --Articles: Art. 12 GDPR, Art. 13 GDPR, Art. 21 GDPR |