Free Cookie Audit

The GDPR Fine Tracker

GDPR Fine November 11, 2020 |GDPR Cookie Consent

Here is brief list containing all of the EU/GDPR fines imposed on companies since the implementation of the law. This list does not contain any fines charged outside of the EU or the UK.

Seers Code Country Date Fine £ Controller/Processor Quoted Art. Type Source
438 UNITED KINGDOM 2020-11-15 1.6 m TicketMaster UK Article 56 of the GDPR, Article 60 of the GDPR Fincial details in chatbot compromised. link
437 Germany 2020-11-11 800,500 Telecoms provider (1&1 Telecom GmbH) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
436 SPAIN 2020-11-05 67,000 Telefonica Moviles Espana, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
435 SPAIN 2020-11-03 26,000 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
434 UNITED KINGDOM 2020-10-30 18,226,109 Marriott International, Inc Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
433 SPAIN 2020-10-28 32,085 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
432 SPAIN 2020-10-28 3,600 Play Orenes, S.L. Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
431 ITALY 2020-10-26 18,000 Università Campus Bio-medico di Roma (Polyclinic) Art. 5 (2) a), f) GDPR, Art. 9 GDPR Non-compliance with general data processing principles link
430 HUNGARY 2020-10-23 48,841 Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak Art. 12 GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 25 GDPR Insufficient fulfilment of data subjects rights link
429 CYPRUS 2020-10-22 5,348 Cyprus Police Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
428 LITHUANIA 2020-10-21 13,500 Vilnius City Municipality Administration Art. 5 (1) d) GDPR, Art. 5 (1) f) GDPR Non-compliance with general data processing principles link link
427 ROMANIA 2020-10-20 1800 Globus Score SRL Art. 58 GDPR Insufficient cooperation with supervisory authority link
426 CYPRUS 2020-10-19 890 Grant Ideas Ltd Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
425 CYPRUS 2020-10-19 13,500 Bank of Cyprus Public Company Ltd Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 15 GDPR, Art. 32 GDPR, Art. 33 GDPR Insufficient technical and organisational measures to ensure information security link
424 UNITED KINGDOM 2020-10-16 19,648,548 British Airways Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
423 ROMANIA 2020-10-15 2,600 S.C. Marsorom S.R.L. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
422 SPAIN 2020-10-09 802.13 Café Restaurante B.B.B Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
421 SPAIN 2020-10-09 1800 Private Person Art. 5 (1) c) GDPR, Art. 6 GDPR Non-compliance with general data processing principles link
420 SPAIN 2020-10-09 44,000 Centro de Investigación y Estudio para la Obesidad, SL Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
419 SPAIN 2020-10-09 4,400 Caja Rural San José de Nules S. Cooperativa de Crédito Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
418 SPAIN 2020-10-06 53,475 Lycamobile Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
417 SPAIN 2020-10-06 3,600 Callesgarcia, S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
416 SPAIN 2020-10-03 2,600 Avata Hispania, S.L. Art. 5 GDPR, Art. 6 GDPR, Art. 28 (3) g) GDPR Insufficient legal basis for data processing link
415 GERMANY 2020-10-01 31,424,404 H&M Hennes & Mauritz Online Shop A.B. & Co. KG Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
414 ROMANIA 2020-10-01 2,600 Megareduceri TV S.R.L. Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
413 ROMANIA 2020-10-01 1800 Asociația de proprietari Militari R Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
412 ITALY 2020-09-30 71,300 Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 28 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
411 ITALY 2020-09-30 53,475 Scanshare s.r.l. Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
410 SPAIN 2020-09-30 2,600 Venu Sanz Chef, S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
409 SPAIN 2020-09-25 53,475 Xfera Moviles S.A. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
408 NORWAY 2020-09-25 12,388 Odin Flissenter AS Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
407 SPAIN 2020-09-22 53,475 GLP Instalaciones 86, SL Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
406 SPAIN 2020-09-22 6,952 Iweb Internet Learning, S.L. Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR Insufficient fulfilment of information obligations link
405 SPAIN 2020-09-17 53,475 Vodafone España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
404 SPAIN 2020-09-17 2,600 Grupo Carolizan Art. 5 GDPR Non-compliance with general data processing principles link
403 SPAIN 2020-09-16 8,900 Property owners community Art. 5 GDPR Non-compliance with general data processing principles link
402 SPAIN 2020-09-11 1,350 Political Party Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
401 GREECE 2020-09-11 6,400 Private Person Art. 5 GDPR Non-compliance with general data processing principles link
400 POLAND 2020-09-08 10,033 Warsaw University of Life Sciences Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
399 ROMANIA 2020-09-08 1800 Sanatatea Press Group S.R.L. Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
398 SPAIN 2020-09-07 2,600 Barcelona Airport Security Guard Association (‘AVSAB’) Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
397 ITALY 2020-09-07 1800 Istituto Comprensivo Statale Crucoli Torretta Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
396 BELGIUM 2020-09-07 4,400 Former mayor of a community Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
395 NORWAY 2020-09-03 247,262 Bergen Municipality Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
394 ITALY 2020-09-03 1800 Comune di Casaloldo Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
393 SPAIN 2020-09-01 67,190 Telefónica Móviles España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
392 ROMANIA 2020-09-01 445 Apartment building owners association Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 25 GDPR, Art. 32 GDPR Insufficient legal basis for data processing link
391 POLAND 2020-08-31 20,336 Surveyor General of Poland (‘GKK’) Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
390 SPAIN 2020-08-28 44,000 Bankia S.A. Art. 5 (1) b) GDPR Non-compliance with general data processing principles link
389 SPAIN 2020-08-28 4,400 Basketball Federation of Castilla and Leon Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
388 SPAIN 2020-08-17 4,400 Party of the Socialists of Catalonia Art. 5 (1) b) GDPR Non-compliance with general data processing principles link
387 ESTONIA 2020-08-17 43 Police Officer Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
386 ITALY 2020-08-10 8,900 Cavauto S.R.L. Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR Insufficient legal basis for data processing link
385 ITALY 2020-08-10 8,900 Community of Baronissi Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
384 SPAIN 2020-08-06 2,600 GROW BEATS SL Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR Insufficient fulfilment of information obligations link
383 ITALY 2020-08-06 2,600 GTL S.R.L. Art. 12 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
382 SPAIN 2020-08-06 2,600 Just Landed S.L. Art. 13 GDPR Insufficient fulfilment of information obligations link
381 FRANCE 2020-08-05 223,969 Spartoo Art. 5 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
380 FINLAND 2020-08-05 6,271 Acc Consulting Varsinais-Suomi Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
379 SPAIN 2020-08-05 2,600 Restaurant Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR Non-compliance with general data processing principles link
378 AUSTRIA 2020-08-05 89 Bank Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
377 ITALY 2020-08-05 1800 School Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
376 DENMARK 2020-08-04 18,007 PrivatBo A.M.B.A. Art. 5 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
375 SPAIN 2020-08-04 53,752 Vodafone España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
374 ITALY 2020-08-04 13,500 Mapei S.p.A. Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR Insufficient legal basis for data processing link
373 ITALY 2020-08-04 4,400 National Institute for Social Security – Department of the Province of Brescia Art. 15 GDPR Insufficient fulfilment of data subjects rights link
372 ITALY 2020-08-04 890 Supermarket Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
371 GREECE 2020-08-03 2,600 Candidate for parliamentary elections Art. 15 GDPR Insufficient fulfilment of data subjects rights link
370 SPAIN 2020-07-31 40,314 Vodafone España SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
369 SPAIN 2020-07-31 1,343 Tour & People Max S.L. Art. 21 GDPR Insufficient fulfilment of data subjects rights link
368 ROMANIA 2020-07-30 1800 SC Viva Credit IFN SA Art. 17 GDPR Insufficient fulfilment of data subjects rights link
367 ROMANIA 2020-07-30 1800 Romanian Post National Company Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
366 ITALY 2020-07-30 1800 Community of Manduria Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
365 ITALY 2020-07-29 2,600 Community of San Giorgio Jonico Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
364 ITALY 2020-07-29 3,600 Region of Campania Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
363 DENMARK 2020-07-28 132,410 Arp Hansen Hotel Group A/S Art. 5 (1) e) GDPR Non-compliance with general data processing principles link
362 BELGIUM 2020-07-28 2,600 Communal political association Art. 5 GDPR, Art. 6 GDPR, Art. 14 GDPR Insufficient legal basis for data processing link
361 ROMANIA 2020-07-27 4,479 SC Cntar Tarom SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
360 SPAIN 2020-07-23 8,900 El Periódico de Catalunya, S.L.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
359 SPAIN 2020-07-23 49,273 Telefónica Móviles España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
358 SPAIN 2020-07-23 62,711 Telefónica Móviles España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
357 SPAIN 2020-07-23 67,190 Telefónica Móviles España, SAU Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
356 SPAIN 2020-07-23 4,400 Xfera Moviles S.A. Art. 58 GDPR Insufficient cooperation with supervisory authority link
355 SPAIN 2020-07-23 4,400 El Real Sporting de Gijón S.A.D. Art. 6 GDPR, Art. 7 GDPR Insufficient legal basis for data processing link
354 HUNGARY 2020-07-23 501 Forbes Hungary Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
353 HUNGARY 2020-07-23 1,522 Employer Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR Insufficient fulfilment of data subjects rights link
352 SPAIN 2020-07-20 21,501 Banco Bilbao Vizcaya Argentaria, SA Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
351 SPAIN 2020-07-20 36,000 Iberia Lae SA Operadora Unipersonal Art. 58 GDPR Insufficient cooperation with supervisory authority link
350 SPAIN 2020-07-20 1,350 Comercial Vigobrandy, SL Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR Insufficient fulfilment of information obligations link
349 SPAIN 2020-07-20 71,670 Orange Espagne S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
348 SPAIN 2020-07-20 62,711 Xfera Moviles S.A. Art. 5 GDPR Non-compliance with general data processing principles link
347 HUNGARY 2020-07-16 25 Google Ireland Ltd. Art. 12 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
346 POLAND 2020-07-15 19,978 Office for geodesy and cartography Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
345 BELGIUM 2020-07-14 537,527 Google Belgium SA Art. 5 GDPR, Art. 6 GDPR, Art. 17 (1) a) GDPR, Art. 12 GDPR Insufficient fulfilment of data subjects rights link
344 BELGIUM 2020-07-14 4,400 Operator of CCTV of a residential building Art. 6 GDPR, Art. 7 GDPR Insufficient legal basis for data processing link
343 ITALY 2020-07-13 180,000 Merlini s.r.l. Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 28 GDPR, Art. 29 GDPR Insufficient legal basis for data processing link
342 ITALY 2020-07-13 14,961,172 Wind Tre S.p.A. Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 24 GDPR, Art. 25 GDPR Insufficient legal basis for data processing link
341 ITALY 2020-07-13 716,702 Iliad Italia S.p.A. Art. 5 GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
340 POLAND 2020-07-10 3,045 East Power Sp. z o.o. Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
339 NORWAY 2020-07-10 41,801 Municipality of Rælingen Art. 32 GDPR, Art. 35 GDPR Insufficient technical and organisational measures to ensure information security link
338 SPAIN 2020-07-10 1,350 Auto Desguaces Iglesias S.L. Art. 5 GDPR Non-compliance with general data processing principles link
337 SPAIN 2020-07-10 890 Centro Internacional De Crecimiento Laboral Y Profesional S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
336 SPAIN 2020-07-10 10,750 Vodafone España, SAU Art. 5 GDPR Non-compliance with general data processing principles link
335 SPAIN 2020-07-10 4,400 Global Business Travel Spain SLU Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
334 SPAIN 2020-07-10 4,400 School Fitness Holiday & Franchising S.L. Art. 5 GDPR Non-compliance with general data processing principles link
333 SPAIN 2020-07-10 49,273 Xfera Moviles S.A. Art. 5 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
332 ROMANIA 2020-07-09 13,500 Proleasing Motors SRL Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
331 THE NETHERLANDS 2020-07-06 743,579 Bureau Krediet Registration (‘BKR’) Art. 12 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
330 SPAIN 2020-07-02 21,501 Iberdrola Clientes Art. 5 GDPR Non-compliance with general data processing principles link
329 SPAIN 2020-07-02 3,600 De Vere Spain S.L. Art. 21 GDPR Insufficient fulfilment of data subjects rights link
328 NORWAY 2020-07-02 25,084 Odin Flissenter AS Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
327 SPAIN 2020-07-02 3,225 Saunier-Tec Mantenimientos de Calor y Frio, SL. Art. 33 GDPR Insufficient fulfilment of data breach notification obligations link
326 SPAIN 2020-07-02 4,400 Xfera Moviles S.A. Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
325 ITALY 2020-07-02 13,500 Mapei S.p.A. Art. 5 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
324 GERMANY 2020-06-30 1,110,889 Allgemeine Ortskrankenkasse (‘AOK’) (health insurance company) Art. 5 GDPR, Art. 6 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
323 DENMARK 2020-06-30 6,002 Lejre Municipality Art. 5 GDPR, Art. 6 GDPR, Art. 33 GDPR, Art. 34 GDPR Non-compliance with general data processing principles link
322 IRELAND 2020-06-30 36,000 Tusla Child and Family Agency Art. 33 GDPR Insufficient fulfilment of data breach notification obligations link
321 GREECE 2020-06-29 4,400 New York College S.A. Art. 5 GDPR Non-compliance with general data processing principles link
320 ISLE OF MAN 2020-06-25 12,094 Department of Home Affairs Art. 12 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
319 SPAIN 2020-06-23 6,719 Miraclia (telecommunications company) Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
318 SPAIN 2020-06-22 1800 Unknown Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
317 NORWAY 2020-06-22 100,338 Østfold HF Hospital Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
316 BELGIUM 2020-06-19 8,900 Unknown Art. 5 GDPR, Art. 6 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
315 NORWAY 2020-06-19 25,084 Aquateknikk AS Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
314 SPAIN 2020-06-19 5,375 National Police Brigade Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
313 ROMANIA 2020-06-18 3,600 Enel Energie Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
312 SPAIN 2020-06-16 1800 Café Bar Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
311 SWEDEN 2020-06-16 1,702 Housing Association Art. 5 GDPR, Art. 6 GDPR Non-compliance with general data processing principles link
310 BELGIUM 2020-06-16 890 Unknown Art. 17 GDPR, Art. 21 GDPR, Art. 31 GDPR Insufficient fulfilment of data subjects rights link
309 SPAIN 2020-06-15 67,191 Xfera Moviles S.A. Art. 6 GDPR Insufficient legal basis for data processing link
308 HUNGARY 2020-06-12 258,013 Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) Art. 5 (1) b), (e) GDPR, Art. 32 (1), (2) GDPR Insufficient technical and organisational measures to ensure information security link
307 ROMANIA 2020-06-11 2,600 Telekom Romania Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
306 SPAIN 2020-06-09 4,400 Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
305 SPAIN 2020-06-09 483.77 Chenming Ye (Bazar Real) Art. 13 GDPR, Art. 14 GDPR Insufficient fulfilment of information obligations link
304 SPAIN 2020-06-09 890 Property Owner Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
303 SPAIN 2020-06-09 67,191 Equifax Iberica, S.L. Art. 15 GDPR Insufficient fulfilment of data subjects rights link
302 SPAIN 2020-06-09 34,939 Xfera Moviles S.A. Art. 5 (1) f) GDPR Insufficient legal basis for data processing link
301 SPAIN 2020-06-09 22,396 Glovoapp23 Art. 37 GDPR Lack of appointment of data protection officer link
300 SPAIN 2020-06-09 36,000 TELEFONICA MOVILES ESPAÑA, S.A.U. Art. 6 GDPR Insufficient legal basis for data processing link
299 SPAIN 2020-06-09 2,687 Salad Market S.L. (Catering Company) Art. 13 GDPR, Art. 14 GDPR Insufficient fulfilment of information obligations link
298 SPAIN 2020-06-09 1800 Attorney Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
297 SPAIN 2020-06-09 1800 Property Owner Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
296 BELGIUM 2020-06-08 4,400 Municipal employee Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
295 SPAIN 2020-06-04 3,583 Iberdrola Clientes Art. 58 GDPR Insufficient cooperation with supervisory authority link
294 POLAND 2020-06-03 960 Entrepreneur running a non-public nursery and pre-school Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
293 BELGIUM 2020-05-29 890 Non-profit organisation Art. 6 GDPR, Art. 21 GDPR Insufficient fulfilment of data subjects rights link
292 FINLAND 2020-05-29 64,503 Taksi Helsinki Art. 5 GDPR, Art. 6 GDPR, Art. 35 GDPR Non-compliance with general data processing principles link
291 FINLAND 2020-05-22 89,000 Posti Group Oyj Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
290 FINLAND 2020-05-22 14,334 Kymen Vesi Oy Art. 35 GDPR Non-compliance with general data processing principles link
289 FINLAND 2020-05-22 11,198 Unknown Company Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
288 IRELAND 2020-05-17 67,190 Tusla Child and Family Agency Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
287 DENMARK 2020-05-15 6,002 JobTeam A/S DKK Art. 15 GDPR Insufficient fulfilment of data subjects rights link
286 BELGIUM 2020-05-14 44,000 Social Media Provider Art. 6 GDPR Insufficient legal basis for data processing link
285 SWEDEN 2020-05-12 10,033 Health and Medical Board of the Region of Örebro County Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
284 ROMANIA 2020-05-05 4,450 Banca Comercială Română SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
283 NORWAY 2020-05-03 120,047 Telenor Norge AS Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
282 THE NETHERLANDS 2020-04-30 649,511 Unknown Organisation Art. 5 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
281 ESTONIA 2020-04-30 445 Housing Association Art. 6 GDPR Insufficient legal basis for data processing link
280 SWEDEN 2020-04-29 16,752 National Government Service Centre (NGSC) Art. 33 GDPR, Art. 34 GDPR Insufficient fulfilment of data breach notification obligations link
279 BELGIUM 2020-04-28 44,500 Proximus SA Art. 31 GDPR, Art. 58 GDPR, Art. 37 GDPR Lack of appointment of data protection officer link
278 ROMANIA 2020-04-23 2,600 Estee Lauder Romania Art. 6 GDPR, Art. 7 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
277 ROMANIA 2020-04-23 2,600 Telekom Romania Communications SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
276 BULGARIA 2020-04-14 1800 Political Party Art. 6 GDPR Insufficient legal basis for data processing link
275 HUNGARY 2020-03-26 2,589 Bank Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
274 ROMANIA 2020-03-25 1800 SOS Infertility Association Art. 58 GDPR Insufficient cooperation with supervisory authority link
273 ROMANIA 2020-03-25 2,600 Enel Energie Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
272 ROMANIA 2020-03-25 3,717 Vodafone Romania Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
271 ROMANIA 2020-03-25 2,600 Dante International Art. 6 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
270 SPAIN 2020-03-25 4,400 Xfera Moviles S.A. Art. 58 GDPR Insufficient cooperation with supervisory authority link
269 GREECE 2020-03-20 6,400 Speech and Special Education Centre – Mihou Dimitra Art. 15 GDPR, Art. 58 GDPR Insufficient fulfilment of data subjects rights link
268 SPAIN 2020-03-19 5,375 Oliveros Ustrell, S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
267 HUNGARY 2020-03-19 5,000 Unknown Company Art. 6 GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
266 SPAIN 2020-03-18 26,876 Telefónica Art. 58 GDPR Insufficient cooperation with supervisory authority link
265 SPAIN 2020-03-16 4,400 Centro De Estudio Dirigidos Delta, S.L. Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
264 SPAIN 2020-03-16 3,600 Private Person Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
263 SPAIN 2020-03-16 5,375 Amalfi Servicios de Restauracion S.L. Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
262 CROATIA 2020-03-13 unknown Bank (name not available at the moment) Art. 15 (1), (3) GDPR Insufficient fulfilment of data subjects rights link
261 SPAIN 2020-03-12 1800 Homeowners Association Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
260 SWEDEN 2020-03-11 6,271,150 Google LLC Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR Insufficient fulfilment of data subjects rights link
259 DENMARK 2020-03-10 6,271 Hørsholm Municipality Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
258 DENMARK 2020-03-10 12,542 Gladsaxe Municipality Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
257 ICELAND 2020-03-10 18,455 National Center of Addiction Medicine (‘SAA’) Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
256 ICELAND 2020-03-10 8,063 Breiðholt Upper Secondary School Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
255 SPAIN 2020-03-09 13,500 Gesthotel Activos Balagares Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
254 POLAND 2020-03-09 3,942 Vis Consulting Sp. z o.o. Art. 31 GDPR, Art. 58 GDPR Insufficient cooperation with supervisory authority link
253 HUNGARY 2020-03-09 779.41 Creditor Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
252 ITALY 2020-03-06 3,600 Liceo Artistico Statale di Napoli Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
251 ITALY 2020-03-06 3,600 Liceo Scientifico Nobel di Torre del Greco Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
250 SPAIN 2020-03-06 3,600 Private person Art. 5 GDPR Non-compliance with general data processing principles link
249 SPAIN 2020-03-06 2,867 Retailer Art. 13 GDPR, Art. 14 GDPR Insufficient fulfilment of information obligations link
248 ITALY 2020-03-05 2,600 San Giorgio Jonico Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR Insufficient legal basis for data processing link
247 POLAND 2020-03-04 3,800 School in Gdansk (Danzig) (fine imposed against town of Gdansk) Art. 5 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
246 SPAIN 2020-03-04 53,753 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
245 HUNGARY 2020-03-04 259.8 Representative of a local government Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR Insufficient legal basis for data processing link
244 THE NETHERLANDS 2020-03-03 445,500 Royal Dutch Tennis Association (‘KNLTB’) Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
243 SPAIN 2020-03-03 1,613 Solo Embrague Art. 13 GDPR Insufficient fulfilment of information obligations link
242 SPAIN 2020-03-03 37,627 Vodafone España, S.A.U. Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
241 SPAIN 2020-03-03 36,000 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
240 SPAIN 2020-03-03 21,501 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
239 SPAIN 2020-02-28 43,002 Vodafone ONO, S.A.U. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
238 SPAIN 2020-02-28 3,225 AEMA Hispánica Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
237 NORWAY 2020-02-28 32,968 Coop Finnmark SA Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
236 SPAIN 2020-02-27 107,505 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
235 NORWAY 2020-02-26 65,937 Rælingen Municipality Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
234 SPAIN 2020-02-25 43,002 HM Hospitales Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
233 SPAIN 2020-02-25 4,200 Casa Gracio Operation Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
232 GREECE 2020-02-21 4,479 Public Power Corporation S.A. Art. 15 GDPR Insufficient fulfilment of data subjects rights link
231 BULGARIA 2020-02-20 2,293 T.K. EOOD Art. 25 (1) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
230 BULGARIA 2020-02-20 2,293 L.E. EOOD Art. 25 (1) GDPR, Art. 32 GDPR, Art. 6 GDPR Insufficient technical and organisational measures to ensure information security link
229 SPAIN 2020-02-18 1,350 Mymoviles Europa 2000, S.L. Art. 13 GDPR Insufficient fulfilment of information obligations link
228 SPAIN 2020-02-14 2,240 Grupo Valsor Y Losan, S.L. Art. 5 (1) f) GDPR Insufficient technical and organisational measures to ensure information security link
227 SPAIN 2020-02-14 2,600 Colegio Arenales Carabanchel (School) Art. 6 GDPR Insufficient legal basis for data processing link
226 SPAIN 2020-02-14 71,670 Iberdrola Clientes Art. 6 GDPR Insufficient legal basis for data processing link
225 SPAIN 2020-02-14 37,627 Vodafone España, S.A.U. Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
224 SPAIN 2020-02-14 26,876 Xfera Moviles S.A. Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
223 ITALY 2020-02-13 3,600 Comune di Urago Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
222 ROMANIA 2020-02-11 2,600 Vodafone Romania Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
221 ITALY 2020-02-06 1,800 RTI – Reti Televisive Italiane s.p.a. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
220 SPAIN 2020-02-04 1,350 Cafetería Nagasaki Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
219 SPAIN 2020-02-03 53,753 Xfera Moviles S.A. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
218 SPAIN 2020-02-03 67,191 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
217 SPAIN 2020-02-03 53,753 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
216 SPAIN 2020-02-03 44,794 Vodafone España, S.A.U. Art. 5 GDPR Non-compliance with general data processing principles link
215 SPAIN 2020-02-03 1,800 Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
214 SPAIN 2020-02-03 67,191 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
213 SPAIN 2020-02-03 5,976 Banco Bilbao Vizcaya Argentaria S.L. Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
212 SPAIN 2020-02-03 4,400 Queseria Artesenal Ameco S.L. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
211 SPAIN 2020-02-03 716.7 Automoción Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
210 ITALY 2020-01-30 3,600 Comune di Colledara Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
209 HUNGARY 2020-01-24 1,299 Accounting firm Art. 24 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
208 ITALY 2020-01-23 26,000 Azienda Ospedaliero Universitaria Integrata di Verona (Hospital) Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
207 ITALY 2020-01-23 26,000 Sapienza Università di Roma Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
206 ITALY 2020-01-15 24,905,425 TIM (telecommunications operator) Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 32 GDPR Insufficient legal basis for data processing link
205 ITALY 2020-01-15 8,900 Community of Francavilla Fontana Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
204 SPAIN 2020-01-14 3,225 Zhang Bordeta 2006, S.L. (Store and Restaurant) Art. 5 GDPR Non-compliance with general data processing principles link
203 CYPRUS 2020-01-13 8,063 Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
202 CYPRUS 2020-01-13 890 eShop for Sports (M.L. PRO.FIT SOLUTIONS LTD) Art. 6 GDPR Insufficient legal basis for data processing link
201 GREECE 2020-01-13 13,500 Allseas Marine S.A. Art. 5 (1) a), (2) GDPR Non-compliance with general data processing principles link
200 SPAIN 2020-01-09 2,600 Vodafone España, S.A.U. Art. 58 GDPR Insufficient cooperation with supervisory authority link
199 SPAIN 2020-01-07 39,419 Vodafone España, S.A.U. Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
198 SPAIN 2020-01-07 67,191 EDP España S.A.U. Art. 6 GDPR Insufficient legal basis for data processing link
197 SPAIN 2020-01-07 67,191 EDP Comercializadora, S.A.U. Art. 6 GDPR Insufficient legal basis for data processing link
196 SPAIN 2020-01-07 8,900 Asociación de Médicos Demócratas Art. 6 GDPR Insufficient legal basis for data processing link
195 BULGARIA 2020-01-06 4,400 Utility Company Art. 6 (1) GDPR Insufficient legal basis for data processing link
194 GREECE 2019-12-19 134,382 Aegean Marine Petroleum Network Inc. Art. 5 GDPR, Art. 6 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
193 ROMANIA 2019-12-18 1800 Telekom Romania Mobile Communications SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
192 UNITED KINGDOM 2019-12-17 286,681 Doorstep Dispensaree Ltd. (Pharmacy) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
191 BELGIUM 2019-12-17 1800 Nursing Care Organisation Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR Insufficient fulfilment of data subjects rights link
190 BELGIUM 2019-12-17 13,500 Website providing legal information Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR Insufficient fulfilment of information obligations link
189 SWEDEN 2019-12-16 31,356 Nusvar AB Art. 6 GDPR Insufficient legal basis for data processing link
188 ROMANIA 2019-12-16 1800 Globus Score SRL Art. 58 GDPR Insufficient cooperation with supervisory authority link
187 ROMANIA 2019-12-16 5,375 SC Enel Energie S.A. (Electricity Distributor) Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
186 ROMANIA 2019-12-13 4,400 Entirely Shipping & Trading S.R.L. Art. 5 (1) GDPR, Art. 6 GDPR, Art. 7 GDPR Non-compliance with general data processing principles link
185 ROMANIA 2019-12-13 4,400 Entirely Shipping & Trading S.R.L. Art. 5 (1) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 9 GDPR Non-compliance with general data processing principles link
184 HUNGARY 2019-12-11 1,281 Unknown Company Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
183 ITALY 2019-12-11 7,614,968 Eni Gas e Luce Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
182 ITALY 2019-12-11 2,600,000 Eni Gas e Luce Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
181 SPAIN 2019-12-10 1,433 Megastar SL Art. 5 (1) c) GDPR, Art. 13 GDPR Non-compliance with general data processing principles
180 SPAIN 2019-12-10 4,400 Shop Macoyn, S.L. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
179 ROMANIA 2019-12-10 12,542 Hora Credit IFN SA Art. 5 GDPR, Art. 25 GDPR, Art. 32 GDPR, Art. 33 GDPR Insufficient technical and organisational measures to ensure information security link
178 GERMANY 2019-12-09 8,555,640 Telecoms provider (1&1 Telecom GmbH) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
177 GERMANY 2019-12-09 8,900 Rapidata GmbH Art. 37 GDPR Lack of appointment of data protection officer link
176 ROMANIA 2019-12-04 18,000 S CNTAR TAROM SA (Airline) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
175 GERMANY 2019-12-03 94,067 Hospital Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
174 SPAIN 2019-12-03 1,350 Cerrajeria Verin S.L. Art. 13 GDPR Insufficient fulfilment of information obligations link
173 SPAIN 2019-12-03 4,479 Linea Directa Aseguradora Art. 6 GDPR Insufficient legal basis for data processing link
172 ROMANIA 2019-12-02 1800 Nicola Medical Team 17 SRL Art. 58 GDPR Insufficient cooperation with supervisory authority link
171 ROMANIA 2019-11-29 2,240 Royal President S.R.L. Art. 15 GDPR, Art. 6 GDPR, Art. 32 GDPR Insufficient fulfilment of data subjects rights link
170 ROMANIA 2019-11-29 440 Homeowners Association Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
169 BELGIUM 2019-11-28 4,400 Mayor Art. 6 GDPR Insufficient legal basis for data processing link
168 BELGIUM 2019-11-28 4,400 Municipal alderman Art. 6 GDPR Insufficient legal basis for data processing link
167 ROMANIA 2019-11-28 71,670 ING Bank N.V. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
166 SPAIN 2019-11-28 67,191 Curenergía Comercializador de último recurso Art. 6 GDPR Insufficient legal basis for data processing link
165 ROMANIA 2019-11-26 2,600 Modern Barber Art. 58 GDPR Insufficient cooperation with supervisory authority link
164 ROMANIA 2019-11-25 9,700 Courier Services Company Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
163 ROMANIA 2019-11-22 1800 BNP Paribas Personal Finance S.A. Art. 12 GDPR, Art. 17 GDPR Insufficient fulfilment of data subjects rights link
162 SPAIN 2019-11-21 53,753 Viaqua Xestión Integral Augas de Galicia Art. 6 GDPR Insufficient legal basis for data processing link
161 FRANCE 2019-11-21 445,500 Futura Internationale Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 21 GDPR Insufficient fulfilment of data subjects rights link
160 SPAIN 2019-11-19 53,753 Corporación radiotelevisión espanola Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
159 SPAIN 2019-11-19 53,753 Xfera Moviles S.A. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
158 SPAIN 2019-11-19 5,375 Sports Bar Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
157 SPAIN 2019-11-14 26,000 Telefónica SA Art. 5 GDPR Non-compliance with general data processing principles link
156 SPAIN 2019-11-13 2,600 General Confederation of Labour (‘CGT’) Art. 6 GDPR Insufficient legal basis for data processing link
155 SPAIN 2019-11-07 806.29 TODOTECNICOS24H S.L. Art. 13 GDPR Insufficient fulfilment of information obligations link
154 SPAIN 2019-11-06 806.29 Cerrajero Online Art. 13 GDPR Insufficient fulfilment of information obligations link
153 SPAIN 2019-11-06 53,753 Vodafone España, S.A.U. Art. 6 GDPR Insufficient legal basis for data processing link
152 LATVIA 2019-11 135,000 Unknown Art. 6 GDPR Insufficient legal basis for data processing link
151 SPAIN 2019-10-31 5,375 Jocker Premium Invex Art. 6 GDPR Insufficient legal basis for data processing link
150 THE NETHERLANDS 2019-10-31 806290 UWV (Dutch employee insurance service provider) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
149 THE NETHERLANDS 2019-10-31 44,000 Menzis (Health Insurance Company) Art. 5 GDPR Non-compliance with general data processing principles link
148 GERMANY 2019-10-30 12,990,239 Deutsche Wohnen SE Art. 5 GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
147 GERMANY 2019-10-30 unknown Deutsche Wohnen SE Art. 5 GDPR Non-compliance with general data processing principles link
146 BULGARIA 2019-10-28 445 Employer Art. 12 (3) GDPR, Art. 15 (1) GDPR Insufficient fulfilment of data subjects rights link
145 SPAIN 2019-10-25 32,252 Vodafone España, S.A.U. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
144 CYPRUS 2019-10-25 62,712 LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd Art. 6 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
143 CYPRUS 2019-10-25 8,959 LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd Art. 6 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
142 CYPRUS 2019-10-25 1,800 LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd Art. 6 GDPR, Art. 9 GDPR Insufficient legal basis for data processing link
141 HUNGARY 2019-10-24 6,630 Military Hospital Art. 32 GDPR, Art. 33 GDPR Insufficient fulfilment of data breach notification obligations link
140 GERMANY 2019-10-24 89,000 Food company Art. 5 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
139 AUSTRIA 2019-10-23 16,125,814 Austrian Post Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
138 SPAIN 2019-10-23 53,753 Vodafone España, S.A.U. Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
137 POLAND 2019-10-18 8,403 Major of Aleksandrów Kujawski Art. 28 GDPR Insufficient data processing agreement link
136 GREECE 2019-10-18 18,000 Wind Hellas Telecommunications Art. 21 GDPR Insufficient fulfilment of data subjects rights link
135 ROMANIA 2019-10-17 2,240 UTTIS INDUSTRIES SRL Art. 12 GDPR, Art. 13 GDPR, Art. 5 (1) c) GDPR, Art. 6 GDPR Insufficient fulfilment of information obligations link
134 SPAIN 2019-10-16 53,753 Xfera Moviles S.A. Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
133 SPAIN 2019-10-16 7,167 Iberdrola Clientes Art. 31 GDPR Insufficient cooperation with supervisory authority link
132 POLAND 2019-10-16 42,106 ClickQuickNow Art. 5 GDPR Non-compliance with general data processing principles link
131 HUNGARY 2019-10-15 2,562 Unknown Company Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
130 ROMANIA 2019-10-09 135,000 Raiffeisen Bank SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
129 ROMANIA 2019-10-09 18,000 Vreau Credit SRL Art. 32 GDPR, Art. 33 GDPR Insufficient technical and organisational measures to ensure information security link
128 BULGARIA 2019-10-08 4,550 The Ministry of Interior Affairs Art. 5 (1) GDPR, Art. 6 (1) GDPR Insufficient legal basis for data processing link
127 GREECE 2019-10-07 180,000 Telecommunication Service Provider Art. 5 (1) c) GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
126 GREECE 2019-10-07 180,000 Telecommunication Service Provider Art. 21 (3) GDPR, Art. 25 GDPR Non-compliance with general data processing principles link
125 BULGARIA 2019-10-07 445 B.D. Art. 31 GDPR Insufficient cooperation with supervisory authority link
124 SPAIN 2019-10-01 26,000 Vueling Airlines Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
123 HUNGARY 2019-10 13,500 Town of Kerepes Art. 6 (1) GDPR Insufficient legal basis for data processing link
122 ROMANIA 2019-09-26 8,063 Inteligo Media SA Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR Insufficient legal basis for data processing link
121 GERMANY 2019-09-19 175,061 Delivery Hero Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR Insufficient fulfilment of data subjects rights link
120 BELGIUM 2019-09-17 89,000 Merchant Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
119 POLAND 2019-09-10 577,842 Morele.net Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
118 BULGARIA 2019-09-03 25,174 National Revenue Agency Art. 6 (1) GDPR, Art. 58 (2) e) GDPR, Art. 83 (5) a) GDPR Insufficient legal basis for data processing link
117 BULGARIA 2019-09-03 900 Telecommunication service provide Art. 6 (1) GDPR, Art. 25 (1) GDPR Insufficient legal basis for data processing link
116 BULGARIA 2019-09-03 4,500 Telecommunication service provide Art. 6 (1) GDPR, Art. 25 (1) GDPR Insufficient legal basis for data processing link
115 BULGARIA 2019-09-03 10,536 Commercial representative of telecommunication service provider Art. 6 (1) GDPR Insufficient legal basis for data processing link
114 BULGARIA 2019-09-03 900 Private enforcement agent Art. 12 (4) GDPR, Art. 15 GDPR Insufficient fulfilment of data subjects rights link
113 BULGARIA 2019-08-28 2,329,284 National Revenue Agency Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
112 BULGARIA 2019-08-28 445,000 DSK Bank Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
111 LATVIA 2019-08-26 6,271 Online Services Art. 17 GDPR Insufficient fulfilment of data subjects rights link
110 SWEDEN 2019-08-20 16,690 School in Skellefteå Art. 5 (1) c) GDPR, Art. 9 GDPR, Art. 35 GDPR, Art. 36 GDPR Insufficient legal basis for data processing link
109 SPAIN 2019-08-16 53,753 AVON COSMETICS Art. 6 GDPR Insufficient legal basis for data processing link
108 HUNGARY 2019-08-08 1,536 Government Office Managing the Real Estate Register Art. 5 GDPR, Art. 14 GDPR Non-compliance with general data processing principles link
107 GERMANY 2019-08-05 180 Private person (YouTube-Channel) Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
106 HUNGARY 2019-08-02 3,843 Public area maintenance company Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR Non-compliance with general data processing principles link
105 AUSTRIA 2019-08 44,000 Company in the medical sector Art. 13 GDPR, Art. 37 GDPR Insufficient fulfilment of information obligations link
104 GREECE 2019-07-30 134,382 PWC Business Solutions Art. 5 (1) GDPR, Art. 5 (2) GDPR, Art. 6 (1) GDPR, Art. 13 (1) c) GDPR, Art. 14 (1) c) GDPR Insufficient legal basis for data processing link
103 FRANCE 2019-07-25 161,258 ACTIVE ASSURANCES (car insurer) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
102 HUNGARY 2019-07-17 7,682 Budapest Environs Regional Court Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
101 ROMANIA 2019-07-05 2,600 LEGAL COMPANY & TAX HUB SRL Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
100 ROMANIA 2019-07-02 13,438 WORLD TRADE CENTER BUCHAREST SA Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
99 AUSTRIA 2019-07 9,100 Private person (soccer coach) Art. 6 GDPR Insufficient legal basis for data processing link
98 ROMANIA 2019-06-27 116,464 UNICREDIT BANK SA Art. 25 (1) GDPR, Art. 5 (1) c) GDPR Insufficient technical and organisational measures to ensure information security link
97 HUNGARY 2019-06-26 2,553 Unknown Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR Insufficient legal basis for data processing link
96 HUNGARY 2019-06-26 2,553 Financial Enterprise Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR Insufficient legal basis for data processing link
95 HUNGARY 2019-06-25 13,500 Unknown Art. 33 GDPR Insufficient fulfilment of data breach notification obligations link
94 THE NETHERLANDS 2019-06-18 412,104 Haga Hospital Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
93 FRANCE 2019-06-13 18,000 Employer UNIONTRAD COMPANY Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 32 GDPR Insufficient legal basis for data processing link
92 SPAIN 2019-06-11 223,970 Professional Football League (LaLiga) Art. 5 (1) a), Art. 7 (3) GDPR Insufficient fulfilment of information obligations link
91 DENMARK 2019-06-03 179,937 IDdesign A / S Art. 5 (1) e) GDPR, Art. 5 (2) GDPR Non-compliance with general data processing principles link
90 HUNGARY 2019-06-03 2,553 Claim management company Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
89 HUNGARY 2019-05-31 1,800 Local bank Art. 12 (3), (4), (5) GDPR, Art. 15 GDPR, Art. 18 GDPR Insufficient fulfilment of data subjects rights link
88 BELGIUM 2019-05-28 1,800 Mayor Art. 5 (1) b) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
87 FRANCE 2019-05-28 360,000 SERGIC (Real Estate) Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
86 HUNGARY 2019-05-23 82,552 Organizer of SZIGET festival and VOLT festival Art. 6 GDPR, Art. 5 (1) b) GDPR, Art. 13 GDPR Insufficient legal basis for data processing link
85 HUNGARY 2019-05-21 256.22 Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest Art. 33 GDPR Insufficient fulfilment of data breach obligations link
84 LITHUANIA 2019-05-16 55,097 Payment service provider UAB MisterTango Art. 5 GDPR, Art. 32 GDPR, Art. 33 GDPR Insufficient fulfilment of data breach notification obligations link
83 GERMANY 2019-05-09 1,300 Police Officer Art. 6 GDPR Insufficient legal basis for data processing link
82 CZECH REPUBLIC 2019-05-06 173.8 Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
81 NORWAY 2019-04-29 107,505 Oslo Municipal Education Department Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
80 POLAND 2019-04-25 11,602 Sports association Art. 6 GDPR Insufficient legal basis for data processing link link
79 ITALY 2019-04-17 44,000 Italian political party Movimento 5 Stelle Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
78 HUNGARY 2019-04-17 8,421 Unknown Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
77 GERMANY 2019-04-12 71,670 Company in the financial sector Art. 5 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
76 BULGARIA 2019-04-08 440 Medical centers Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 9 (2) GDPR, Art. 6 (1) GDPR Insufficient legal basis for data processing link
75 HUNGARY 2019-04-05 30,796 Hungarian political party Art. 33 (1) GDPR, Art. 33 (5) GDPR, Art. 34 (1) GDPR Insufficient fulfilment of data breach notification obligations link
74 HUNGARY 2019-04-05 1,702 Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
73 POLAND 2019-03-26 197,093 Private company working with data from publicly available sources Art. 14 GDPR Insufficient fulfilment of information obligations link
72 BULGARIA 2019-03-26 4,400 A.P. EOOD Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
71 PORTUGAL 2019-03-25 1,800 Unknown Art. 13 GDPR Insufficient fulfilment of information obligations link
70 CZECH REPUBLIC 2019-03-21 8,900 Unknown Art. 5 (1) GDPR Non-compliance with general data processing principles link
69 PORTUGAL 2019-03-19 1,800 Unknown Art. 13 GDPR Insufficient fulfilment of information obligations link
68 HUNGARY 2019-03-04 2,867 Unnamed financial institution Art. 5 (1) b) GDPR, Art. 5 (1) c) GDPR, Art. 13 (3) GDPR, Art. 17 (1) GDPR, Art. 6 (4) GDRP Insufficient fulfilment of data subjects rights link link
67 GERMANY 2019-03 44,000 N26 Art. 6 GDPR Insufficient legal basis for data processing
Page 131 of the activity report of the Data Protection Commissioner of Berlin link link
66 NORWAY 2019-03 152,299 Bergen Municipality Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
65 CZECH REPUBLIC 2019-02-28 500 Unknown Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
64 HUNGARY 2019-02-28 2,867 Mayor’s Office of the city of Kecdkemét Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link link
63 BULGARIA 2019-02-26 24,278 Telecommunication service provider Art. 6 GDPR, Art. 5 (1) a) GDPR Insufficient legal basis for data processing link
62 CZECH REPUBLIC 2019-02-26 695.2 Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
61 BULGARIA 2019-02-22 440 Employer Art. 15 GDPR Insufficient fulfilment of data subjects rights link
60 HUNGARY 2019-02-20 13,500 Debt collector Art. 5 (1) a) GDPR, Art. 5 (1) c) GDPR Non-compliance with general data processing principles link link
59 MALTA 2019-02-18 4,400 Lands Authority Art. 5 GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
58 HUNGARY 2019-02-08 1,398 Bank Art. 5 (1) d) GDPR Non-compliance with general data processing principles link link
57 GERMANY 2019-02-05 2,240 Private person Art. 6 GDPR, Art. 5 GDPR Insufficient legal basis for data processing link
56 PORTUGAL 2019-02-05 18,000 Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
55 CZECH REPUBLIC 2019-02-04 1,044 Car renting company Art. 5 (1) a) GDPR Insufficient fulfilment of information obligations link
54 CZECH REPUBLIC 2019-02-04 1,044 Credit brokerage Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
53 FRANCE 2019-01-21 44,000,000 Google Inc. Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 5 GDPR Insufficient legal basis for data processing link
52 BULGARIA 2019-01-17 440 Bank Art. 6 GDPR, Art. 5 (1) a) GDPR Insufficient legal basis for data processing link
51 CZECH REPUBLIC 2019-01-10 347.6 Employer Art. 6 GDPR Insufficient legal basis for data processing link
50 CYPRUS 2019 4,400 State Hospital Art. 15 GDPR Insufficient fulfilment of data subjects rights link
49 CYPRUS 2019 8,900 Newspaper Art. 6 GDPR Insufficient legal basis for data processing link
48 DENMARK 2019 143,341 Taxa 4×35 Art. 5(1) e) GDPR Non-compliance with general data processing principles link
47 CYPRUS 2019 12,542 Doctor Art. 5 GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
46 GERMANY 2019 Unknown Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
45 SPAIN 2019 18,500 Vodafone España, S.A.U. Art. 6 (1) GDPR Insufficient legal basis for data processing link
44 SPAIN 2019 32,252 VODAFONE ONO, S.A.U. Art. 5 (1) f) GDPR Non-compliance with general data processing principles link
43 SPAIN 2019 43,002 VODAFONE ONO, S.A.U. Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
42 SPAIN 2019 43,002 TELEFONICA MOVILES ESPAÑA, S.A.U. Art. 5 (1) a) GDPR Non-compliance with general data processing principles link
41 SPAIN 2019 26,000 Vodafone España, S.A.U. Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
40 SPAIN 2019 36,000 Vodafone España, S.A.U. Art. 6 GDPR Insufficient legal basis for data processing link
39 SPAIN 2019 18,000 Private Person Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
38 SPAIN 2019 8,063 Private Person Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
37 SPAIN 2019 3,225 AMADOR RECREATIVOS, S.L Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
36 GERMANY 2019 716.7 Police Officer Art. 6 GDPR Insufficient legal basis for data processing link
35 GERMANY 2019 263,388 Unknown Art. 5 GDPR Non-compliance with general data processing principles link
34 GERMANY 2019 46,000 Facebook Germany GmbH Art. 37 GDPR Lack of appointment of data protection officer link
33 GERMANY 2019 18,000 Hamburger Verkehrsverbund GmbH (HVV GmbH) Art. 33 GDPR, Art. 34 GDPR Insufficient fulfilment of data breach notification obligations link
32 GERMANY 2019 Unknown Hamburger Volksbank eG Art. 21 GDPR Insufficient fulfilment of data subjects rights link
31 GERMANY 2019 1,800 Restaurant Art. 5 (1) c) GDPR Non-compliance with general data processing principles link
30 GERMANY 2019 45100 Unknown Company Art. 15 GDPR, Art. 28 GDPR Insufficient fulfilment of data subjects rights link
29 AUSTRIA 2018-12-20 19,800 Private person Art. 5 (1) a) GDPR, Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 13 GDPR Insufficient legal basis for data processing link
28 HUNGARY 2018-12-18 2,888 Unknown Art. 12 (4) GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 13 GDPR Insufficient fulfilment of data subjects rights link
27 GERMANY 2018-12-17 4,500 Kolibri Image Regina und Dirk Maass GbR Art. 28 (3) GDPR Insufficient data processing agreement link link
26 AUSTRIA 2018-12-09 4,332 Betting place Art. 13 GDPR Insufficient fulfilment of information obligations link
25 BULGARIA 2018-12-04 451 Bank Art. 5 (1) b) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link link
24 GERMANY 2018-11-21 18,500 Knuddels.de Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
23 CZECH REPUBLIC 2018-10-25 350 Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
22 AUSTRIA 2018-09-27 270 Private car owner Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
21 PORTUGAL 2018-07-17 36,100 Public Hospital Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
20 AUSTRIA 2018 1,625 Kebab restaurant Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR Insufficient legal basis for data processing link
19 GERMANY 2018 18,500 Unknown Art. 83 (4) a) GDPR, Art. 33 (1) GDPR, Art. 34 (1) GDPR Insufficient fulfilment of data breach notification obligations
18 GERMANY 2018 451 Unknown Unknown Unknown link
17 CZECH REPUBLIC Unknown 2,834 UniCredit Bank Czech Republic and Slovakia, a.s. Art. 6 GDPR Insufficient legal basis for data processing link
16 GERMANY Unknown 106 Unknown Art. 6 GDPR Insufficient legal basis for data processing link
15 SPAIN Unknown 4,500 Vodafone España, S.A.U. Art. 5 (1) d) GDPR Non-compliance with general data processing principles link
14 SPAIN Unknown 54,000 Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL) Art. 5 (1) f) GDPR Insufficient legal basis for data processing link
13 SPAIN Unknown 24,000 Vodafone España, S.A.U. Art. 5 (1) d) GDPR Insufficient fulfilment of data subjects rights link
12 SPAIN Unknown 54,000 ENDESA (energy supplyer) Art. 5 (1) f) GDPR Insufficient legal basis for data processing link
11 SPAIN Unknown 8,666 Restaurant (SANTI 3000, S.L.) Art. 5 (1) a) GDPR, Art. 6 GDPR Insufficient legal basis for data processing link
10 SLOVAKIA Unknown Unknown Unknown Art. 15 GDPR Insufficient fulfilment of data subjects rights link
9 SLOVAKIA Unknown Unknown Unknown Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
8 SLOVAKIA Unknown Unknown Unknown Art. 5 (1) f) GDPR, Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
7 SLOVAKIA Unknown Unknown Unknown Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR Insufficient legal basis for data processing link
6 SLOVAKIA Unknown 36,000 Slovak Telekom Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
5 SPAIN Unknown 10,830 Madrileña Red de Gas Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
4 SLOVAKIA Unknown 45,000 Social Insurance Agency Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
3 CZECH REPUBLIC Unknown 538 Alza.cz a.s. Art. 6 GDPR, Art. 7 GDPR Insufficient legal basis for data processing link
2 CZECH REPUBLIC Unknown 884 Individual entrepreneur – no further details published Art. 32 GDPR Insufficient technical and organisational measures to ensure information security link
1 SPAIN Unknown 9,025 Ikea Ibérica Art. 6 GDPR Insufficient legal basis for data processing link

 

 

 

 

 

Leave a Reply

Your email address will not be published. Required fields are marked *

More posts:
November 30, 2020
Canadian CPPA: Everything You Need To Know
November 30, 2020
Privacy Updates This Week

Seers Group © 2020 All Rights Reserved

Terms of use | Privacy policy | Cookie Policy | Sitemap