UK DUAA right to complain enforces in -- days · 19 June 2026 EU AI Act high-risk enforces in -- days · 2 August 2026

Enforcement Intelligence

GDPR Enforcement Risk in Germany Transport and Energy

Real enforcement patterns. Operational governance signals. Practical remediation paths.

Analyse your AI governance risk

Enterprise-grade AI governance without the enterprise team. Português, Français, Deutsch, Español, and English. 89 Articles, 4 Continents, within your budget and expertise level. Runtime AI Governance. For a demo: hello@obexgate.com

Enforcement Summary

Total finesEUR 977K
Enforcement actions6
Largest fineEUR 900K
Most common violationUnknown
Primary regulatorData Protection Authority of Hamburg
Risk signal72

Top Violations

Structured violation patterns are shown only when supplied in the enforcement dataset.

Unknown

Count
2

Insufficient technical and organisational security measures

Count
2

Insufficient fulfilment of data breach notification obligations

Count
1

Insufficient data processing agreement

Count
1

Common Patterns

Operational patterns that repeat across enforcement records.

Real Examples

Examples are shown only when source-backed records are supplied.

Energy utility

Regulator
Data Protection Authority of Hamburg
Date
2021-09-24
Fine amount
EUR 900K
Source
Source
Governance lesson
Insufficient data processing agreement

Company

Regulator
Data Protection Authority of Hamburg
Date
2024
Fine amount
EUR 32K
Source
Source
Governance lesson
Insufficient technical and organisational security measures

Regional public transport authority

Regulator
Data Protection Authority of Hamburg
Date
2019
Fine amount
EUR 20K
Source
Source
Governance lesson
Insufficient fulfilment of data breach notification obligations

Enforcement Pattern › Governance Control › Runtime Evidence

OBEXGATE Remediation Positioning

OBEXGATE turns enforcement patterns into operational controls and runtime evidence.

Enforcement Pattern Governance Control Runtime Evidence

Source and Update Positioning

Information contained is not medical advice, legal advice, or a guarantee of success. Regulatory requirements change and should be verified against current published guidance, legislation, and regulator materials.