enforcementtracker

5 years GDPR: The 2023 anniversary edition of the CMS Enforcement Tracker Report is now available providing a deep dive into fines imposed under the GDPR: cms.law/en/int/publica…

New fine in Ireland: The Irish Data Protection Commission (DPC) has fined Meta Platforms Ireland Limited EUR 251 million for violations of Art. 25 GDPR and Art. 33 GDPR: enforcementtracker.com/ETid-2484

New fine in Poland: The Polish DPA has fined Santander Bank Polska S.A. EUR 326,000 for failing to report a data breach to the DPA and data subjects in a timely manner: enforcementtracker.com/ETid-2260

New fine in Greece: The Hellenic DPA has imposed a fine of EUR 175,000 on the Greek Ministry of Immigration and Asylum for violating Art. 25 GDPR, Art. 31 GDPR and Art. 35 GDPR: enforcementtracker.com/ETid-2266

New fine in Spain: The Spanish DPA has imposed a fine of EUR 365,000 on CTC EXTERNALIZACIÓN, S.L. for unlawfully processing employee data: enforcementtracker.com/ETid-2267

New fine in Italy: The Italian DPA has imposed a fine of EUR 2.8 million on UniCredit S.p.a. for violating Art. 5 (1) f) GDPR and Art. 32 (1), (2) GDPR: enforcementtracker.com/ETid-2227

New fine in Norway: The Norwegian DPA has imposed a fine of EUR 1.7 million on Arbeids- og velferdsetaten, the Norwegian Labor and Welfare Administration (NAV) due to insufficient technical and organizational measures to ensure data protection: enforcementtracker.com/ETid-2136

New fine in Spain: The Spanish DPA has imposed a fine of EUR 50,000 on SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. for violating Art. 6 (1) GDPR: enforcementtracker.com/ETid-2131

New fine in the Netherlands: The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality for excessively storing personal data: enforcementtracker.com/ETid-2132

New fine in Italy: The Italian DPA has imposed a fine of EUR 10 million on electricity and gas supplier Axpo Italia Spa for violating Art. 5 (1) a), d) GDPR and Art. 24 (2) GDPR: enforcementtracker.com/ETid-2077

New fine in Croatia: The Croatian DPA (AZOP) has imposed of fine of EUR 5,470,000 on a debt collection company for processing personal data without a valid legal basis: enforcementtracker.com/ETid-2063

New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on TELEFÓNICA MÓVILES ESPAÑA, S.A.U. for violating Art. 6 (1) GDPR: enforcementtracker.com/ETid-1987

New fine in Italy: The Italian DPA has imposed a fine of EUR 15,000 on Thin Srl for violating Art. 5 (1) a) GDPR, Art. 9 GDPR and Art. 13 GDPR: enforcementtracker.com/ETid-1993

New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on Digi Spain Telecom, S.L.U for violating Art. 6 (1) GDPR: enforcementtracker.com/ETid-1962

New fine in Poland: The Polish DPA has fined a company EUR 7,500 for failing to provide information requested by the DPA during an investigation: enforcementtracker.com/ETid-1978

New fine in Lithuania: The Lithuanian DPA has fined a company EUR 20,000 for violating Art. 5 (1) e), f) GDPR and Art. 32 (1) b), d) GDPR: enforcementtracker.com/ETid-1973

New fine in Sweden: The Swedish DPA has fined music streaming provider Spotify EUR 4.9 million for violating Art. 12 (1) GDPR and Art. 15 (1), (2) GDPR: enforcementtracker.com/ETid-1876

New fine in Spain: The Spanish DPA has fined a private individual EUR 10,000 for publishing a picture and the address of another person on a website without their consent: enforcementtracker.com/ETid-1853

New fine in Romania: The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post for violating Art. 5 GDPR and Art. 6 GDPR: enforcementtracker.com/ETid-1848

New fine in Romania: The Romanian DPA has imposed a fine of EUR 18,000 on AUTOMOBILE BAVARIA SRL for failing to implement sufficient technical and organisational measures to ensure information security: enforcementtracker.com/ETid-1849