| Name | Year | Industry | Est. SizeInfo | Country | Amount | Infringement | Authority | Reference |
|---|---|---|---|---|---|---|---|---|
| DSK Bank | 2019 | Banking | Large Enterprise |  Bulgaria | €511,000 | Art. 32 (1) (b) GDPR | Bulgarian Commission for Personal Data Protection ("CPDP") | link |
| CYTA Ltd | 2020 | Digital infrastructures | Large Enterprise |  Cyprus | €10,000 | Art. 5 GDPR, Art. 6 GDPR | Cypriot Data Protection Commissioner | link |
| SERGIC (Real Estate) | 2019 | Other | Large Enterprise |  France | €400,000 | Art. 5 (1) e) GDPR | French Data Protection Authority (CNIL) | link |
| Knuddels | 2018 | Digital service providers | Micro Enterprise |  Germany | €20,000 | Art. 32 GDPR | Data Protection Authority of Baden-Wuerttemberg | link |
| MisterTango | 2019 | Banking | Small Enterprise |  Lithuania | €61,500 | Art. 5 GDPR, Art. 32 GDPR, Art. 33 GDPR | Lithuanian Data Protection Authority (VDAI) | link |
| Centro Hospitalar Barreiro Montijo, EPE | 2018 | Healthcare | Small Enterprise |  Portugal | €400,000 | Art. 5 (1) f) GDPR, Art. 32 GDPR | Portuguese Data Protection Authority (CNPD) | link |
| UniCredit Bank SA | 2019 | Banking | Large Enterprise |  Romania | €130,000 | Art. 25 (1) GDPR, Art. 5 (1) c) GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | link |
| British Airways | 2020 | Transportation | Large Enterprise |  United Kingdom | €22,046,000 | Art. 5 (1) f) GDPR, Art. 32 GDPR | Information Commissioner (ICO) | link |
| WORLD TRADE CENTER BUCHAREST SA | 2019 | Trade | Medium Enterprise | Romania | €15,000 | Art. 32 GDPR | Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) | link |
| Marriott International, Inc | 2020 | Catering and hospitality | Large Enterprise | United Kingdom | €20,450,000 | Art. 32 GDPR | Information Commissioner (ICO) | link |
Showing 1 - 10 of 163 results