Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

Art. 9 GDPR

Privacy and data-protection enforcement actions citing this article.

Recorded fines
€14.1M
Settlements
€0
Restitution, damages & other payments
€0

Payment categories are separate and must not be added together. Shared obligations count once, against their designated case. Amounts describe recorded obligations, not money collected.

Actions

48

Total Fines

€14.1M

Average Fine

€361K

Countries

12

Enforcement Under Art. 9 GDPR

Art. 9 GDPR has been cited in 48 European data-protection enforcement actions. These actions have resulted in fines totaling €14.1M, with an average fine of €361K. Enforcement is spread across 12 countries, with Italy being the most active enforcer.

Enforcement by Country

Enforcement by Year

YearActionsTotal Fines
20203€75K
20214€95K
202213€277K
202312€5.9M
20247€578K
20254€92K
20265€7.0M

Commonly Co-Cited Articles

Art. 32 GDPR
39 shared actions
Art. 5(1)(a) GDPR
23 shared actions
Art. 5(1)(f) GDPR
15 shared actions
Art. 25 GDPR
14 shared actions
Art. 6 GDPR
9 shared actions
Art. 5 GDPR
9 shared actions
Art. 12 GDPR
8 shared actions
Art. 13 GDPR
8 shared actions
Art. 33 GDPR
5 shared actions
Art. 14 GDPR
4 shared actions

Frequently Asked Questions

How many enforcement actions cite Art. 9 GDPR?

European data protection authorities have cited Art. 9 GDPR in 48 enforcement actions, resulting in fines totaling €14.1M.

What is the average fine for Art. 9 GDPR violations?

The average fine for enforcement actions citing Art. 9 GDPR is €361K, though amounts vary significantly based on the severity and scope of the violation.

Which countries enforce Art. 9 GDPR most?

The most active countries in enforcing Art. 9 GDPR are Italy, Belgium, Netherlands.

Which GDPR articles are commonly cited alongside Art. 9 GDPR?

Art. 9 GDPR is most frequently cited together with Art. 32 GDPR, Art. 5(1)(a) GDPR, Art. 5(1)(f) GDPR.

Explore More