Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2022-05-20 | Private individual | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-03-25 | Kaufland România SCS | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-compliance with subjects' rights protection safeguards | --Articles: Art .15 (3) GDPR |
| 2022-10-31 | Private individual | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR |
| 2020-07-30 | Romanian Post National Company | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR |
| 2019-11-22 | BNP Paribas SA | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Information obligation non-compliance | --Articles: Art. 12 GDPR, Art. 17 GDPR |
| 2022-03-28 | Condor SA | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 (1), (2), (4) GDPR |
| 2022-12-09 | Casa Rusu S.R.L. | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 25 (1) GDPR, Art. 32 (1) b) GDPR, Art. 32 (2) GDPR |
| 2022-02-04 | Private individual | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) a) GDPR |
| 2022-06-03 | Kaufland Romania SCS | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 29 GDPR, Art. 32 (1) b) GDPR, Art. 32 (2), (4) GDPR |
| 2022-08-04 | Sephora Cosmetics România SA | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 21 GDPR |
| 2021-12-28 | Call shop manager | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2020-09-08 | Sanatatea Press Group S.R.L. | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2020-07-30 | SC Viva Credit IFN SA | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Information obligation non-compliance | --Articles: Art. 17 GDPR |
| 2019-03-25 | Not available | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Non-compliance with subjects' rights protection safeguards | Not availableNot available Articles: Art. 15 GDPR |
| 2021-12-28 | VENTANAS MAKE YOURSELF, S.L. | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2021-12-21 | FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 7 GDPR, Art. 13 GDPR |
| 2021-07-07 | Homeowners Association | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR |
| 2021-12-17 | Online retailer | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR |
| 2021-12-17 | Private individual | €2K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR |
| 2019-03-19 | Not known | €2K | GDPR | Portuguese Data Protection Authority (CNPD) | Portugal | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2020-09-07 | Instituto Comprensivo Statale Crucoli Torretta | €2K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2019-01-01 | Restaurant | €2K | GDPR | Data Protection Authority of Saarland | Germany | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2020-10-20 | Globus Score SRL | €2K | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to comply with Data Processing Authority's orders | --Articles: Art. 58 GDPR |
| 2019-05-31 | Local bank | €2K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Failure to implement sufficient measures to ensure information security | --Articles: Art. 12 (3), (4), (5) GDPR, Art. 15 GDPR, Art. 18 GDPR |
| 2020-08-05 | School | €2K | GDPR | Italian Data Protection Authority (Garante) | Italy | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |