Database met boetes voor handhaving privacy
Handhavingsacties voor GDPR, CCPA, LGPD en andere privacywetten volgen en analyseren. Leer van praktijkgevallen om uw nalevingsprogramma te verbeteren.
2894
Totaal handhavingsacties
€6.8B
Totaal opgelegde boetes
1886
Betrokken organisaties
53
Regelgevende instanties
Filterresultaten
Showing 1 to 50 of 2894 fines
| Datum | Organisatie | Autoriteit | Wet | Bedrag | Overtredingen | Status |
|---|---|---|---|---|---|---|
| Sep 30, 2025 | Company Industry and Commerce HU | Data Protection Authority of Hamburg (HmbBfDI) | GDPR | €195,000 | Insufficient fulfilment of data subjects rights | Finale |
| Sep 30, 2025 | Company Industry and Commerce HU | Data Protection Authority of Hamburg (HmbBfDI) | GDPR | €492,000 | Non-compliance with general data processing principles | Finale |
| Sep 25, 2025 | SERVACE S.L. Employment ES | Spanish Data Protection Authority (aepd) | GDPR | €840 | Non-compliance with general data processing principles | Finale |
| Sep 25, 2025 | S.C. PRIMONET RO S.R.L. Industry and Commerce RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €20,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 23, 2025 | Property manager Real Estate ES | Spanish Data Protection Authority (aepd) | GDPR | €600 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 22, 2025 | DHL PARCEL IBERIA, S.L. Transportation and Energy ES | Spanish Data Protection Authority (aepd) | GDPR | €3,000 | Non-compliance with general data processing principles | Finale |
| Sep 18, 2025 | SAMARITAINE SAS Industry and Commerce FR | French Data Protection Authority (CNIL) | GDPR | €100,000 | Non-compliance with general data processing principles | Finale |
| Sep 18, 2025 | Dr. Max SRL Health Care RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €1,000 | Insufficient fulfilment of data subjects rights | Finale |
| Sep 11, 2025 | Casa di Cura Città di Roma Health Care IT | Italian Data Protection Authority (Garante) | GDPR | €12,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 9, 2025 | Unita Turism Holding S.A. Employment RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €5,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 8, 2025 | S-Pankki Oyj Finance, Insurance and Consulting FI | Deputy Data Protection Ombudsman | GDPR | €1,800,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 5, 2025 | Allium UPI Industry and Commerce EE | Estonian Data Protection Authority (AKI) | GDPR | €3,000,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 4, 2025 | Sociedad de Gestión de Activos Procedentes de la Reestructuración Bancaria S.A. Finance, Insurance and Consulting ES | Spanish Data Protection Authority (aepd) | GDPR | €180,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Sep 4, 2025 | Landlord Real Estate BE | Belgian Data Protection Authority (APD) | GDPR | €9,700 | Insufficient legal basis for data processing | Finale |
| Sep 2, 2025 | ILVA A/S Industry and Commerce DK | Danish Data Protection Authority (Datatilsynet) | GDPR | €200,900 | Non-compliance with general data processing principles | Finale |
| Sep 1, 2025 | Company Industry and Commerce HU | Spanish Data Protection Authority (aepd) | GDPR | €1,200 | Insufficient legal basis for data processing | Finale |
| Sep 1, 2025 | INFINITE STYLES SERVICES CO. LIMITED Industry and Commerce FR | French Data Protection Authority (CNIL) | GDPR | €150,000,000 | Insufficient legal basis for data processing | Finale |
| Sep 1, 2025 | Google Ireland Limited Technology IE | French Data Protection Authority (CNIL) | GDPR | €125,000,000 | Insufficient legal basis for data processing | Finale |
| Sep 1, 2025 | Google LLC Media, Telecoms and Broadcasting FR | French Data Protection Authority (CNIL) | GDPR | €200,000,000 | Insufficient legal basis for data processing | Finale |
| Sep 1, 2025 | La Fântâna S.R.L. Industry and Commerce RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €10,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 29, 2025 | GOHIPOTECA, S.L. Finance, Insurance and Consulting ES | Spanish Data Protection Authority (aepd) | GDPR | €1,200 | Insufficient legal basis for data processing | Finale |
| Aug 29, 2025 | KVIKU SPAIN, S.L. Finance, Insurance and Consulting ES | Spanish Data Protection Authority (aepd) | GDPR | €2,400 | Insufficient legal basis for data processing | Finale |
| Aug 26, 2025 | Driving School Industry and Commerce ES | Spanish Data Protection Authority (aepd) | GDPR | €300 | Insufficient fulfilment of information obligations | Finale |
| Aug 26, 2025 | ING Bank Śląski Finance, Insurance and Consulting PL | Polish National Personal Data Protection Office (UODO) | GDPR | €4,323,250 | Insufficient legal basis for data processing | Finale |
| Aug 25, 2025 | YUNEXPRESS SPAIN, S.L. Transportation and Energy ES | Spanish Data Protection Authority (aepd) | GDPR | €5,400 | Insufficient data processing agreement | Finale |
| Aug 25, 2025 | LEIVA BUS, S.L. Transportation and Energy ES | Spanish Data Protection Authority (aepd) | GDPR | €1,800 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 22, 2025 | GRUPO BONATEL SL Media, Telecoms and Broadcasting ES | Spanish Data Protection Authority (aepd) | GDPR | €18,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 22, 2025 | BANCO INVERSIS, S.A. Finance, Insurance and Consulting ES | Spanish Data Protection Authority (aepd) | GDPR | €6,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 18, 2025 | SC Elite Conta SRL Finance, Insurance and Consulting RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €3,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 14, 2025 | WORLD 2 MEET, S.L. Accomodation and Hospitality ES | Spanish Data Protection Authority (aepd) | GDPR | €42,000 | Non-compliance with general data processing principles | Finale |
| Aug 12, 2025 | REAL SOCIEDAD DE FUTBOL S.A.D. Individuals and Private Associations ES | Spanish Data Protection Authority (aepd) | GDPR | €66,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 12, 2025 | Real Federación Española de Tenis de Mesa Individuals and Private Associations ES | Spanish Data Protection Authority (aepd) | GDPR | €1,600 | Insufficient legal basis for data processing | Finale |
| Aug 12, 2025 | GACM SEGUROS GENERALES, COMPAÑIA DE SEGUROS Y REASEGUROS S.A.U. Finance, Insurance and Consulting ES | Spanish Data Protection Authority (aepd) | GDPR | €4,800 | Non-compliance with general data processing principles | Finale |
| Aug 12, 2025 | 'FLEXICREDIT' Mutual Aid House Association Finance, Insurance and Consulting RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €3,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 5, 2025 | Order of Biochemists, Biologists and Chemists in the Romanian Health System Health Care RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €1,000 | Insufficient fulfilment of data subjects rights | Finale |
| Aug 4, 2025 | Ospedaliero-Universitaria Careggi Health Care IT | Italian Data Protection Authority (Garante) | GDPR | €80,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Aug 4, 2025 | Police Officer Individuals and Private Associations DE | Information Commissioner (ICO) | GDPR | €230 | Insufficient legal basis for data processing | Finale |
| Aug 4, 2025 | Comune di Venezia Public Sector and Education IT | Italian Data Protection Authority (Garante) | GDPR | €10,000 | Non-compliance with general data processing principles | Finale |
| Aug 4, 2025 | Linea Stampalibera Società Cooperativa r.I. Media, Telecoms and Broadcasting IT | Italian Data Protection Authority (Garante) | GDPR | €2,000 | Non-compliance with general data processing principles | Finale |
| Aug 4, 2025 | Non-Public Health Care Institution Health Care PL | Polish National Personal Data Protection Office (UODO) | GDPR | €7,700 | Insufficient technical and organisational measures to ensure information security | Finale |
| Jul 28, 2025 | Entrepreneur Employment PL | Polish National Personal Data Protection Office (UODO) | GDPR | €4,400 | Insufficient cooperation with supervisory authority | Finale |
| Jul 23, 2025 | SATI S.p.A. Employment IT | Italian Data Protection Authority (Garante) | GDPR | €10,000 | Non-compliance with general data processing principles | Finale |
| Jul 23, 2025 | Order of Nursing Professions of Viterbo Public Sector and Education IT | Italian Data Protection Authority (Garante) | GDPR | €10,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Jul 23, 2025 | Agricola International SA Industry and Commerce RO | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | GDPR | €5,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Jul 21, 2025 | 24/7 Communication Sp. z o.o. Employment PL | Polish National Personal Data Protection Office (UODO) | GDPR | €43,000 | Insufficient technical and organisational measures to ensure information security | Finale |
| Jul 21, 2025 | McDonald’s Polska Sp. z o.o. Employment PL | Polish National Personal Data Protection Office (UODO) | GDPR | €3,955,000 | Non-compliance with general data processing principles | Finale |
| Jul 18, 2025 | CLUB BALONCESTO TELDE Individuals and Private Associations ES | Spanish Data Protection Authority (aepd) | GDPR | €1,000 | Insufficient legal basis for data processing | Finale |
| Jul 18, 2025 | ADMINISTRACIONES BENIPON, S.L. Real Estate ES | Spanish Data Protection Authority (aepd) | GDPR | €1,100 | Insufficient fulfilment of data breach notification obligations | Finale |
| Jul 17, 2025 | TRUEBA SPORT S.L. Industry and Commerce ES | Spanish Data Protection Authority (aepd) | GDPR | €1,200 | Insufficient technical and organisational measures to ensure information security | Finale |
| Jul 17, 2025 | ENDESA ENERGIA, S.A.U. Transportation and Energy ES | Spanish Data Protection Authority (aepd) | GDPR | €200,000 | Non-compliance with general data processing principles | Finale |
Showing 1 to 50 of 2894 results
Over deze database
Deze database houdt handhavingsacties, boetes en straffen bij die zijn opgelegd door gegevensbeschermingsautoriteiten wereldwijd. Het bevat acties onder GDPR, CCPA, LGPD, PIPEDA en andere privacywetten.
Gegevens worden verzameld uit officiële regelgevende bronnen, persberichten en geverifieerde nieuwsberichten.
Gegevens worden verzameld uit officiële regelgevende bronnen, persberichten en geverifieerde nieuwsberichten.
De database wordt regelmatig bijgewerkt wanneer nieuwe handhavingsacties worden aangekondigd.
De database wordt regelmatig bijgewerkt wanneer nieuwe handhavingsacties worden aangekondigd.
Een fout of ontbrekende zaak gevonden? Help ons deze database te verbeteren. Neem contact met ons op