Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

Art. 6(1) GDPR

Privacy and data-protection enforcement actions citing this article.

Recorded fines
€25.3M
Settlements
€0
Restitution, damages & other payments
€0

Payment categories are separate and must not be added together. Shared obligations count once, against their designated case. Amounts describe recorded obligations, not money collected.

Actions

37

Total Fines

€25.3M

Average Fine

€1.0M

Countries

16

Enforcement Under Art. 6(1) GDPR

Art. 6(1) GDPR has been cited in 37 European data-protection enforcement actions. These actions have resulted in fines totaling €25.3M, with an average fine of €1.0M. Enforcement is spread across 16 countries, with Croatia being the most active enforcer.

Enforcement by Year

YearActionsTotal Fines
20191€150K
20203€12.3M
20214€200
20225€3.7M
20239€8.3M
20248€505K
20256€385K
20261€0

Commonly Co-Cited Articles

Art. 5(1)(a) GDPR
14 shared actions
Art. 32(1) GDPR
13 shared actions
Art. 32 GDPR
11 shared actions
Art. 13(1) GDPR
9 shared actions
Art. 5(2) GDPR
6 shared actions
Art. 9(1) GDPR
6 shared actions
Art. 14 GDPR
6 shared actions
Art. 25(1) GDPR
6 shared actions
Art. 32(1)(b) GDPR
6 shared actions
Art. 33(1) GDPR
5 shared actions

Frequently Asked Questions

How many enforcement actions cite Art. 6(1) GDPR?

European data protection authorities have cited Art. 6(1) GDPR in 37 enforcement actions, resulting in fines totaling €25.3M.

What is the average fine for Art. 6(1) GDPR violations?

The average fine for enforcement actions citing Art. 6(1) GDPR is €1.0M, though amounts vary significantly based on the severity and scope of the violation.

Which countries enforce Art. 6(1) GDPR most?

The most active countries in enforcing Art. 6(1) GDPR are Croatia, Belgium, Poland.

Which GDPR articles are commonly cited alongside Art. 6(1) GDPR?

Art. 6(1) GDPR is most frequently cited together with Art. 5(1)(a) GDPR, Art. 32(1) GDPR, Art. 32 GDPR.

Explore More