GDPR Enforcement Tracker: List of GDPR fines
If you look back at comments as GDPR was first coming into effect, you saw a lot of comments here along the lines of &#x27;The EU  doesn&#x27;t want to fine anyone. They want you to become compliant, and will help you do so, and you won&#x27;t be fined unless you were intentionally being non-compliant&#x27;<p>But then look at this example from Germany:<p>&gt; Please note: According to our information this fine has been withdrawn in the meantime. Kolibri Image had send a request to the Data Protection Authority of Hessen asking how to deal with a service provider who does not want to sign a processing agreement. After not answering Kolibri Image in more detail, the case was forwarded to the locally responsible Data Protection Authority of Hamburg. This Auhtority then fined Kolibri Image as controller for not having a processing agreement with the service provider. Kolibri Image has stated that they will challenge the decision in front of court since they are of the opinion that the service provider does not act as a processor.<p>The company emailed the authority asking for advice on how to deal with a service provider who didn&#x27;t want to cooperate with GDPR, then the authority ignored his request, forwarded their information to another authority, which then fined them for the exact thing which they was asking for advice on.<p>Yes, the fine has apparently been withdrawn, but how much time, money, and mental capacity did Kolibri Image have to spend dealing with this before the authority decided to drop it?