government healthcare social media service provider fine education finance dark web law enforcement retail web telecoms phama travel manufacturing charity operating system insurance legal app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud zero day passwords 3rd parties state hacking employee data remote working stolen data

Acc Consulting Varsinais-Suomi fined 7,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Spartoo fined 250,000 Euros for breaching Art. 5 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Supermarket fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
National Institute for Social Security - Department of the Province of Brescia fined 5,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Mapei S.p.A. fined 15,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Vodafone España, SAU fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Twitter warns investors of possible fine from FTC consent order probe
Tour & People Max S.L. fined 1,500 Euros for breaching Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Vodafone España SAU fined 45,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of Manduria fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Region of Campania fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of San Giorgio Jonico fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Communal political association fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 14 GDPR - Insufficient legal basis for data processing
Employer fined 1,700 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient fulfilment of data subjects rights
Forbes Hungary fined 560 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
El Real Sporting de Gijón S.A.D. fined 5,000 Euros for breaching Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Xfera Moviles S.A. fined 5,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Telefónica Móviles España, SAU fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Telefónica Móviles España, SAU fined 70,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Telefónica Móviles España, SAU fined 55,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
El Periódico de Catalunya, S.L.U. fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Metropolitan Community Health Services (Metro) pays fine
Xfera Moviles S.A. fined 70,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Orange Espagne S.A.U. fined 80,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Comercial Vigobrandy, SL fined 1,500 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
Iberia Lae SA Operadora Unipersonal fined 40,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Banco Bilbao Vizcaya Argentaria, SA fined 24,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Google Ireland Ltd. fined 28 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Office for geodesy and cartography fined 22,300 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Operator of CCTV of a residential building fined 5,000 Euros for breaching Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Google Belgium SA fined 600,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 (1) a) GDPR, Art. 12 GDPR - Insufficient fulfilment of data subjects rights
Iliad Italia S.p.A. fined 800,000 Euros for breaching Art. 5 GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Wind Tre S.p.A. fined 16,700,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 24 GDPR, Art. 25 GDPR - Insufficient legal basis for data processing
Merlini s.r.l. fined 200,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 28 GDPR, Art. 29 GDPR - Insufficient legal basis for data processing
Xfera Moviles S.A. fined 55,000 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
School Fitness Holiday & Franchising S.L. fined 5,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Global Business Travel Spain SLU fined 5,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Vodafone España, SAU fined 12,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Centro Internacional De Crecimiento Laboral Y Profesional S.L. fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Auto Desguaces Iglesias S.L. fined 1,500 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles