Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
2,028 fines found
Total: $8.1B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2020-11-18 | Unknown | €28 | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) d) GDPR |
| 2022-01-01 | Logistics company | €0 | GDPR | Data Protection Authority of Hamburg | Germany | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 (1) GDPR, Art. 33 GDPR, Art. 32 GDPR |
| 2020-01-01 | Bank | €0 | GDPR | Czech Data Protection Authority (UOOU) | Czech Republic | The bank made it mandatory for customers to provide a copy of their IDs when opening an account. This was unlawful. | --Articles: Art. 48 (1) b) LGT, Art. 21 GDPR, Art. 23 (4) LOPGD |
| 2019-10-23 | Austrian Post | €0 | GDPR | Austrian Data Protection Authority (DSB) | Austria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR |
| -- | Unknown | €0 | GDPR | Slovak Data Protection Office | Slovakia | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 15 GDPR |
| 2021-01-01 | Physician | €0 | GDPR | Data Protection Authority of Saxony | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2021-01-01 | Police department | €0 | GDPR | Data Protection Authority of Saxony | Germany | Unknown | --Articles: Unknown |
| 2022-01-01 | Physician | €0 | GDPR | The DPA of Bremen | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2022-01-01 | Private Individual | €0 | GDPR | The DPA of Bremen | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-01-01 | Debt collection company | €0 | GDPR | The DPA of Bremen | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR, Art. 14 (1), (2) GDPR |
| 2021-01-01 | Unknown | €0 | GDPR | Data Protection Authority of Saxony | Germany | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 (1) GDPR |
| 2021-01-01 | Police Officer | €0 | GDPR | Data Protection Authority of Berlin | Germany | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2022-01-01 | Company | €0 | GDPR | The DPA of Bremen | Germany | Failure to comply with data processing principles | --Articles: Art. 5 (1) c) GDPR |
| 2020-01-01 | Healthcare provider | €0 | GDPR | Czech Data Protection Authority (UOOU) | Czech Republic | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 12 (1) GDPR, Art. 28 (2), (3) GDPR |
| 2020-01-01 | Public University | €0 | GDPR | Czech Data Protection Authority (UOOU) | Czech Republic | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR, Art. 13 GDPR |
| 2020-01-01 | Ski Rental Company | €0 | GDPR | Czech Data Protection Authority (UOOU) | Czech Republic | Multiple types of violations | --Articles: Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 7 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 16 GDPR, Art. 17 GDPR, Art. 18 GDPR, Art. 19 GDPR, Art. 20 GDPR, Art. 21 GDPR |
| 2021-01-01 | Private individual | €0 | GDPR | Austrian Data Protection Authority (DSB) | Austria | Failure to comply with data processing principles | --Articles: Art. 5 (1) a) GDPR, Art. 9 (1), (2) GDPR |
| 2021-07-05 | Insurance company | €0 | GDPR | Croatian Data Protection Authority (AZOP) | Croatia | Insufficient fulfilment of information obligations | --Articles: Art. 13 GDPR, Art. 14 GDPR, Art 27 (1) of the National Implementation Law |
| 2022-01-01 | Medical Care Center | €0 | GDPR | The DPA of Bremen | Germany | Unknown | --Articles: Unknown |
| 2021-01-01 | Police Officer | €0 | GDPR | Data Protection Authority of Berlin | Germany | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| -- | Unknown | €0 | GDPR | Slovak Data Protection Office | Slovakia | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2019-10-01 | Deutsche Wohnen SE | €0 | GDPR | Data Protection Authority of Berlin | Germany | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 25 GDPR |
| 2021-01-01 | Private individual | €0 | GDPR | Data Protection Authority of Saxony | Germany | Unknown | --Articles: Unknown |
| 2021-01-01 | Unknown | €0 | GDPR | Data Protection Authority of Berlin | Germany | Unknown | --Articles: Unknown |
| -- | Unknown | €0 | GDPR | Data Protection Authority of Saarland | Germany | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |