Cookie Fines

Market-In - EUR 95,000 fine (Greece)

Hellenic Data Protection Authority — Tue, 18 Aug 2026 11:32:43 GMT

Fine amount: EUR 95,000

Authority: Hellenic Data Protection Authority (Greece)

Date: 2026-06-12

GDPR Articles: Art. 5(1) a) GDPR, c), (2) GDPR, Art. 12(1) GDPR, Art. 12(2) GDPR, Art. 13(GDPR), Art. 15(1) GDPR, (3) GDPR, Art. 31(GDPR)

Non-compliance with general data processing principles

MEDE S.A. - EUR 65,000 fine (Greece)

Hellenic Data Protection Authority — Tue, 18 Aug 2026 11:32:43 GMT

Fine amount: EUR 65,000

Authority: Hellenic Data Protection Authority (Greece)

Date: 2026-06-12

GDPR Articles: Art. 5(1) a) GDPR, b), (2) GDPR, Art. 12(1) GDPR, Art. 13(1) GDPR, (3) GDPR, Art. 15(1) GDPR, Art. 37(GDPR)

Non-compliance with general data processing principles

SILVANERGIA 2022, S.L. - EUR 3,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:43 GMT

Fine amount: EUR 3,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-06-16

GDPR Articles: Art. 6(1) GDPR

Insufficient legal basis for data processing

Sub Agent - EUR 2,415 fine (Poland)

Urząd Ochrony Danych Osobowych — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 2,415

Authority: Urząd Ochrony Danych Osobowych (Poland)

Date: 2026-04-13

GDPR Articles: Art. 28(4) GDPR, Art. 32(1) GDPR, (2) GDPR

Insufficient technical and organisational measures to ensure information security

ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L. - EUR 150,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 150,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-03-20

GDPR Articles: Art. 5(1) f) GDPR

Insufficient technical and organisational measures to ensure information security

CAIXABANK, S.A. - EUR 400,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 400,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-04-15

GDPR Articles: Art. 5(1) f) GDPR, Art. 25(GDPR)

Insufficient technical and organisational measures to ensure information security

Midlands Regional Hospital Tullamore, County Offaly - EUR 300,000 fine (Ireland)

Data Protection Commission — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 300,000

Authority: Data Protection Commission (Ireland)

Date: 2026-06-11

GDPR Articles: Art. 5(1) f) GDPR, Art. 28(GDPR), Art. 30(GDPR), Art. 32(1) GDPR, Art. 34(GDPR)

Insufficient technical and organisational measures to ensure information security

Reda Naujokaitienė - EUR 1,153 fine (Lithuania)

Valstybine duomenu apsaugos inspekcija — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 1,153

Authority: Valstybine duomenu apsaugos inspekcija (Lithuania)

Date: 2026-06-05

GDPR Articles: Art. 5(1) a) GDPR, Art. 6(1) GDPR, Art. 9(2) GDPR

Insufficient legal basis for data processing

Mayor of the City and Municipality of Myślenice - EUR 1,790 fine (Poland)

Urząd Ochrony Danych Osobowych — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 1,790

Authority: Urząd Ochrony Danych Osobowych (Poland)

Date: 2026-04-30

GDPR Articles: Art. 33(1) GDPR

Insufficient fulfilment of data breach notification obligations

SEUR GEOPOST, S.L. - EUR 164,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 164,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2025-10-04

GDPR Articles: Art. 5(1) f) GDPR, Art. 28(GDPR)

Insufficient data processing agreement

SSG SELECT SOLUTIONS S.R.L - EUR 2,000 fine (Romania)

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 2,000

Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romania)

Date: 2026-06-15

GDPR Articles: Art. 29(GDPR), Art. 32(1) GDPR, b), (2), (4) GDPR

Insufficient technical and organisational measures to ensure information security

Națională Poșta Română - EUR 5,000 fine (Romania)

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — Tue, 18 Aug 2026 11:32:42 GMT

Fine amount: EUR 5,000

Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romania)

Date: 2026-06-12

GDPR Articles: Art. 32(1) b) GDPR, (2), (4) GDPR

Insufficient technical and organisational measures to ensure information security

Blikk Kft. - EUR 70,300 fine (Hungary)

Nemzeti Adatvédelmi és Információszabadság Hatóság — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 70,300

Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungary)

Date: 2026-05-29

GDPR Articles: Art. 6(1) f) GDPR, Art. 9(1) GDPR, Art. 12(4) GDPR

Insufficient legal basis for data processing

Elkjøp AS - EUR 1,820,000 fine (Norway)

Datatilsynet (Norway) — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 1,820,000

Authority: Datatilsynet (Norway) (Norway)

Date: 2026-06-01

GDPR Articles: Art. 5(1) a) GDPR, (2) GDPR, Art. 6(1) GDPR, (4) GDPR, Art. 12(3) GDPR

Insufficient legal basis for data processing

AMADEUS IT GROUP, S.A. - EUR 14,400,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 14,400,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2025-04-07

GDPR Articles: Art. 6(GDPR), Art. 14(GDPR)

Insufficient legal basis for data processing

KONECTA BTO, S.L. - EUR 300,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 300,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-04-22

GDPR Articles: Art. 5(1) f) GDPR

Insufficient technical and organisational measures to ensure information security

TIGER MEDIA INC. - EUR 72,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 72,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2025-12-03

GDPR Articles: Art. 6(GDPR), Art. 27(GDPR)

Insufficient legal basis for data processing

IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA - EUR 650,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 650,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-03-11

GDPR Articles: Art. 5(1) f) GDPR

Insufficient technical and organisational measures to ensure information security

Minister of Justice - EUR 23,540 fine (Poland)

Urząd Ochrony Danych Osobowych — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 23,540

Authority: Urząd Ochrony Danych Osobowych (Poland)

Date: 2026-06-02

GDPR Articles: Art. 32(GDPR)

Insufficient technical and organisational measures to ensure information security

Mediaworks Hungary Zrt. - EUR 140,500 fine (Hungary)

Nemzeti Adatvédelmi és Információszabadság Hatóság — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 140,500

Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungary)

Date: 2026-05-26

GDPR Articles: Art. 6(1) GDPR, Art. 9(1) GDPR

Insufficient legal basis for data processing

IQVIA OPERATIONS FRANCE - EUR 5,000,000 fine (France)

Commission Nationale de l'Informatique et des Libertés — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 5,000,000

Authority: Commission Nationale de l'Informatique et des Libertés (France)

Date: 2026-05-26

GDPR Articles: Art. 14(GDPR), Art. 25(GDPR)

Non-compliance with general data processing principles

Posada del León de Oro - EUR 240 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:32:41 GMT

Fine amount: EUR 240

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2026-04-28

GDPR Articles: Art. 5(1) c) GDPR, Art. 13(GDPR)

Non-compliance with general data processing principles

Unicredit Bank SA - EUR 12,000 fine (Romania)

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — Tue, 18 Aug 2026 11:32:40 GMT

Fine amount: EUR 12,000

Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romania)

Date: 2026-05-29

GDPR Articles: Art. 32(1) b) GDPR, (2), (4) GDPR, Art. 33(1) GDPR

Insufficient technical and organisational measures to ensure information security

"Principe Umberto di Savoia" State Scientific and Linguistic High School - EUR 1,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:32:24 GMT

Fine amount: EUR 1,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2025-12-04

GDPR Articles: Art. 5(1) a) GDPR, Art. 6(GDPR), Art. 9(2) b) GDPR, g) GDPR, Art. 13(GDPR), Art. 29(GDPR)

Insufficient legal basis for data processing

"Statista Aldo Moro" Higher Education Institute in Fara Sabina - EUR 4,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:32:17 GMT

Fine amount: EUR 4,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2025-10-23

GDPR Articles: Art. 5(1) a) GDPR, Art. 6(1) c) GDPR, e), (2), (3) GDPR, Art. 37(1) GDPR, (7) GDPR

Insufficient legal basis for data processing

SIA "ZZ Dats" - EUR 300,000 fine (Latvia)

Datu valsts inspekcija — Tue, 18 Aug 2026 11:32:15 GMT

Fine amount: EUR 300,000

Authority: Datu valsts inspekcija (Latvia)

Date: 2025-10-28

GDPR Articles: Art. 32(GDPR)

Insufficient technical and organisational measures to ensure information security

"FLEXICREDIT" Mutual Aid House Association - EUR 3,000 fine (Romania)

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — Tue, 18 Aug 2026 11:32:01 GMT

Fine amount: EUR 3,000

Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romania)

Date: 2025-08-12

GDPR Articles: Art. 32(2) GDPR

Insufficient technical and organisational measures to ensure information security

Istituto di Istruzione Superiore "P. Galluppi" Tropea - EUR 4,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:31:50 GMT

Fine amount: EUR 4,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2025-03-27

GDPR Articles: Art. 5(1) a) GDPR, Art. 6(GDPR), Art. 9(GDPR)

Insufficient legal basis for data processing

Unknown - EUR 4,113,486 fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:46 GMT

Fine amount: EUR 4,113,486

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2024-01-01

GDPR Articles: Unknown

Unknown

Physician - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:19 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Unknown

Non-compliance with general data processing principles

CLÍNICA PARÍS, S.L. - EUR 1,000 fine (Spain)

Agencia Española de Protección de Datos — Tue, 18 Aug 2026 11:31:16 GMT

Fine amount: EUR 1,000

Authority: Agencia Española de Protección de Datos (Spain)

Date: 2024-03-20

GDPR Articles: Art. 58(2) GDPR

Insufficient cooperation with supervisory authority

Unknown - EUR 5,004,000 fine (Croatia)

Agencija za zaštitu osobnih podataka — Tue, 18 Aug 2026 11:31:14 GMT

Fine amount: EUR 5,004,000

Authority: Agencija za zaštitu osobnih podataka (Croatia)

Date: 2024-04-22

GDPR Articles: Art. 27(Croatin)(Law)(on)(the)(Implementation)(of)(the) GDPR, Art. 13(GDPR)

Insufficient fulfilment of information obligations

Fishing club - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:14 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Art. 6(GDPR)

Insufficient legal basis for data processing

Police officer - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:14 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Unknown

Insufficient legal basis for data processing

Supermarket - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:14 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Art. 6(1) GDPR, Art. 9(1) GDPR

Insufficient legal basis for data processing

Daycare center - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:12 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Art. 32(1) GDPR

Insufficient technical and organisational measures to ensure information security

Police officers - EUR 1,001,000 fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:08 GMT

Fine amount: EUR 1,001,000

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Unknown

Insufficient legal basis for data processing

Pizza delivery service - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:31:07 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2023-01-01

GDPR Articles: Art. 5(1) f) GDPR

Non-compliance with general data processing principles

Data protection officer - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:30:43 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2022-01-01

GDPR Articles: Art. 6(GDPR)

Insufficient legal basis for data processing

Unknown - EUR 2,001,000 fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:30:33 GMT

Fine amount: EUR 2,001,000

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2022-01-01

GDPR Articles: Art. 6(GDPR)

Insufficient legal basis for data processing

Aid organization - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:30:26 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2022-01-01

GDPR Articles: Art. 28(3) GDPR, Art. 32(GDPR)

Insufficient technical and organisational measures to ensure information security

Operator of a swimming pool - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:30:26 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2022-01-01

GDPR Articles: Art. 6(1) c) GDPR

Insufficient legal basis for data processing

Bank - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:30:26 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2022-01-01

GDPR Articles: Art. 28(3) GDPR, Art. 32(GDPR)

Insufficient technical and organisational measures to ensure information security

Poliambulatorio Radiologico "il Sorriso" S.r.l. - EUR 15,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:30:11 GMT

Fine amount: EUR 15,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2022-11-10

GDPR Articles: Art. 5(GDPR), Art. 13(GDPR), Art. 37(GDPR)

Non-compliance with general data processing principles

Scuola Statale Secondaria di I^ grado "Bianco-Pascol" - EUR 3,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:30:11 GMT

Fine amount: EUR 3,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2022-12-15

GDPR Articles: Art. 5(GDPR), Art. 6(GDPR), Art. 9(GDPR), Art. 12(GDPR), Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy

Insufficient legal basis for data processing

Liceo Statale "Edoardo Amaldi” - EUR 4,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:29:53 GMT

Fine amount: EUR 4,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2022-09-01

GDPR Articles: Art. 5(GDPR), Art. 6(GDPR), Art. 9(GDPR), Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy, Art. 2-septies (8) Codice della privacy

Insufficient legal basis for data processing

Private individual - EUR 1,001,000 fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:29:44 GMT

Fine amount: EUR 1,001,000

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2021-01-01

GDPR Articles: Art. 6(GDPR)

Insufficient legal basis for data processing

Convitto Nazionale Statale "Giordano Bruno" di Maddaloni (boarding school) - EUR 6,000 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:29:40 GMT

Fine amount: EUR 6,000

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2021-03-25

GDPR Articles: Art. 5(1) a) GDPR, Art. 6(GDPR), Art. 2(ter)((1)) GDPR, (3) Codice della privacy

Insufficient legal basis for data processing

Real estate agent - fine (Germany)

Bundesbeauftragter für den Datenschutz — Tue, 18 Aug 2026 11:29:34 GMT

Authority: Bundesbeauftragter für den Datenschutz (Germany)

Date: 2021-01-01

GDPR Articles: Art. 6(GDPR), Art. 12(GDPR)

Insufficient legal basis for data processing

"Isabella Gonzaga" high school - EUR 2,500 fine (Italy)

Garante per la protezione dei dati personali — Tue, 18 Aug 2026 11:29:32 GMT

Fine amount: EUR 2,500

Authority: Garante per la protezione dei dati personali (Italy)

Date: 2022-04-28

GDPR Articles: Art. 5(GDPR), Art. 6(GDPR), Art. 9(GDPR), Art. 2-ter Codice della privacy, Art. 2-sexties Codice della privacy

Insufficient legal basis for data processing