5 years GDPR: The 2023 anniversary edition of the CMS Enforcement Tracker Report is now available providing a deep dive into fines imposed under the GDPR:

New fine in Ireland: The Irish Data Protection Commission (DPC) has fined Meta Platforms Ireland Limited EUR 251 million for violations of Art. 25 GDPR and Art. 33 GDPR: https://t.co/E4UShdBKzy

New fine in Poland: The Polish DPA has fined Santander Bank Polska S.A. EUR 326,000 for failing to report a data breach to the DPA and data subjects in a timely manner: https://t.co/FYiXcLXvGX

New fine in Greece: The Hellenic DPA has imposed a fine of EUR 175,000 on the Greek Ministry of Immigration and Asylum for violating Art. 25 GDPR, Art. 31 GDPR and Art. 35 GDPR: https://t.co/G1aFtDUvaT

New fine in Spain: The Spanish DPA has imposed a fine of EUR 365,000 on CTC EXTERNALIZACIÓN, S.L. for unlawfully processing employee data: https://t.co/nW7JkINEvx

New fine in Italy: The Italian DPA has imposed a fine of EUR 2.8 million on UniCredit S.p.a. for violating Art. 5 (1) f) GDPR and Art. 32 (1), (2) GDPR:

New fine in Norway: The Norwegian DPA has imposed a fine of EUR 1.7 million on Arbeids- og velferdsetaten, the Norwegian Labor and Welfare Administration (NAV) due to insufficient technical and organizational measures to ensure data protection: https://t.co/nkQ3xvPpvP

New fine in Spain: The Spanish DPA has imposed a fine of EUR 50,000 on SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. for violating Art. 6 (1) GDPR: https://t.co/W2jMh2ahAi

New fine in the Netherlands: The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality for excessively storing personal data: https://t.co/oPNYZjQCuj

New fine in Italy: The Italian DPA has imposed a fine of EUR 10 million on electricity and gas supplier Axpo Italia Spa for violating Art. 5 (1) a), d) GDPR and Art. 24 (2) GDPR: https://t.co/8VTXyOpEyt

New fine in Croatia: The Croatian DPA (AZOP) has imposed of fine of EUR 5,470,000 on a debt collection company for processing personal data without a valid legal basis:

New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on TELEFÓNICA MÓVILES ESPAÑA, S.A.U. for violating Art. 6 (1) GDPR: https://t.co/X4EvEXntjR

New fine in Italy: The Italian DPA has imposed a fine of EUR 15,000 on Thin Srl for violating Art. 5 (1) a) GDPR, Art. 9 GDPR and Art. 13 GDPR: https://t.co/NKIehLG3oA

New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on Digi Spain Telecom, S.L.U for violating Art. 6 (1) GDPR: https://t.co/En1OrTFyxL

New fine in Poland: The Polish DPA has fined a company EUR 7,500 for failing to provide information requested by the DPA during an investigation: https://t.co/pBloKgHd5P

New fine in Lithuania: The Lithuanian DPA has fined a company EUR 20,000 for violating Art. 5 (1) e), f) GDPR and Art. 32 (1) b), d) GDPR: https://t.co/4unO8zqxuH

New fine in Sweden: The Swedish DPA has fined music streaming provider Spotify EUR 4.9 million for violating Art. 12 (1) GDPR and Art. 15 (1), (2) GDPR: https://t.co/ulOBk6nxLS

New fine in Spain: The Spanish DPA has fined a private individual EUR 10,000 for publishing a picture and the address of another person on a website without their consent: https://t.co/MfJT3AtXrQ

New fine in Romania: The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post for violating Art. 5 GDPR and Art. 6 GDPR: https://t.co/SQRCtciPIp

New fine in Romania: The Romanian DPA has imposed a fine of EUR 18,000 on AUTOMOBILE BAVARIA SRL for failing to implement sufficient technical and organisational measures to ensure information security: https://t.co/Wsz3I11aIJ