Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2023-02-21 | Private individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2023-04-03 | Private Individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2022-12-28 | Homeowners Association | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2018-09-27 | Private individual | €300 | GDPR | Austrian Data Protection Authority (DSB) | Austria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR |
| 2023-01-20 | Private individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2022-09-09 | Private Individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2023-02-21 | PLANET COSTA DORADA SOCIEDAD LIMITADA | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2022-05-10 | Store owner | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2022-06-01 | Private Individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2023-02-21 | Private individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-01-01 | Police officer | €300 | GDPR | Data Protection Authority of Hessen | Germany | Unknown | --Articles: Unknown |
| 2023-04-05 | Private individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Information obligation non-compliance | --Articles: Art. 13 GDPR |
| 2023-02-21 | Private individual | €300 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2020-03-04 | Representative of a local government | €286 | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GPDR, Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR |
| 2019-03-04 | Representative of a local government | €286 | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR |
| 2019-05-21 | Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest | €286 | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Information obligation non-compliance | --Articles: Art. 33 GDPR |
| 2022-09-01 | MH VILASECA S.L. | €240 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 13 GDPR |
| 2023-03-14 | Private individual | €240 | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2022-10-24 | Unknown company | €240 | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2019-08-05 | Private person (YouTube-Channel) | €200 | GDPR | Data Protection Authority of Nordrhein-Westfalen | Germany | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2019-08-05 | Private person (YouTube-Channel) | €200 | GDPR | Data Protection Authority of Nordrhein-Westfalen | Germany | Failure to comply with data processing principles | The private person has an insufficient legal basis for using a dashcam to record...The private person has an insufficient legal basis for using a dashcam to record public road traffic and publish it on YouTube as being part of a compilation. Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2021-03-03 | Private Individual | €200 | GDPR | Data Protection Authority of Sachsen-Anhalt | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR, Art. 32 GDPR |
| 2021-07-30 | Private individual | €200 | GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | Romania | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), b), (2) GDPR, Art. 6 (1) GDPR, Art. 14 (1), (4) GDPR |
| 2019-05-06 | Public utility company | €194 | GDPR | Czech Data Protection Auhtority (UOOU) | Czech Republic | Non-compliance with lawful basis for data processing | --Articles: Art. 15 GDPR |
| 2019-05-06 | Public utility company | €194 | GDPR | Czech Data Protection Auhtority (UOOU) | Czech Republic | Non-compliance with lawful basis for data processing | Not available.Not available. Articles: Art. 15 GDPR |