BULLETIN №082Last updated · 03 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 22 Jul 2022 | MAX2PROTECT, S.L.MAX2PROTECT, S.L. was fined EUR 4,000 by the AEPD for sending commercial emails without the required authorization. The case concerned a breach of Article 21 of the LSSI and involved unauthorized marketing communications. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 19 Dec 2025 | MÁV Személyszállítási Zártkörűen Működő RészvénytársaságThe NAIH imposed a 50,000,000 HUF fine on MÁV Személyszállítási Zrt. for breaching GDPR principles. The authority found deficiencies in transparency and data minimization in the company's camera surveillance and audio recording practices at HÉV stations. | HU | NAIH | GDPR | €129,000 | ↗ |
| 22 Jun 2023 | Maviglia Assicurazioni snc di Gherardo Maviglia & c.Maviglia Assicurazioni was fined 5,000 EUR by the Garante for failing to deactivate former employees' email accounts. This allowed unauthorized access to data and breached data protection rules. | IT | Garante | GDPR | €5,000 | ↗ |
| 13 Nov 2025 | Maviglia Assicurazioni snc di Gherardo Maviglia & c.Maviglia Assicurazioni was fined by the Garante 10,000 EUR for unlawful processing of personal data. The case involved automatic email redirection and indefinite retention of email logs and content, which breached GDPR principles. | IT | Garante | GDPR | €10,000 | ↗ |
| 17 Dec 2015 | Maurizio De AngelisMaurizio De Angelis was fined for providing inadequate data protection information in a video surveillance system. The authority found a breach of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 26 May 2010 | MATCHLESS, S.L.MATCHLESS, S.L. was fined by the AEPD 30,001 EUR for sending unsolicited commercial emails without prior recipient consent. The authority also found that the company failed to provide a simple and free mechanism for recipients to object to further communications, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 07 Nov 2014 | MASTOCADOS S.L.MASTOCADOS S.L. was fined by the AEPD 7,400 EUR for sending unauthorized commercial emails to individuals without a prior contractual relationship. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €7,400 | ↗ |
| 13 Sept 2017 | MASTERZEN, S.L.MASTERZEN, S.L. was fined by the AEPD €4,500 for sending unsolicited marketing emails without the recipient’s consent. The emails were sent despite the recipient’s objection, indicating a breach of rules on direct electronic marketing. | ES | AEPD | ePrivacy | €4,500 | ↗ |
| 14 Apr 2021 | MASTER DISTANCIA S.A.MASTER DISTANCIA S.A. was fined EUR 25,000 by the AEPD for unlawfully processing personal data by including it in credit information systems without a valid legal basis. The authority found a breach of GDPR Article 6. | ES | AEPD | GDPR | €25,000 | ↗ |
| 25 Nov 2015 | Massimo GeraciMassimo Geraci was fined by the Garante for failing to provide adequate simplified information about the use of a video surveillance system. The authority found a breach of data protection requirements. | IT | Garante | GDPR | €2,400 | ↗ |
| 01 Mar 2018 | Massimo FarinaMassimo Farina was fined EUR 280,000 by the Garante. The case concerned the use of prepaid credit cards under false names without obtaining consent, which breached data protection rules. | IT | Garante | GDPR | €280,000 | ↗ |
| 09 Jul 2020 | Második ítélet a NAIH/2020/974 sz. ügyben (Fővárosi Törvényszék 105.K.701.565/2022/2)The controller collected personal data for contact purposes without a lawful basis and did not provide adequate information about the processing. The conduct breached multiple GDPR provisions, and the authority imposed a fine of HUF 1,000,000. | HU | NAIH | GDPR | €2,820 | ↗ |
| 01 Jan 2017 | MAS MOVIL TELECOM 3.0 S.A.U. (actualmente XFERA MOVILES, S.A.)The entity was fined by the AEPD in the amount of 2,500 EUR for sending unsolicited marketing messages without providing an opt-out option. This conduct breached article 21.2 of the LSSI, which requires recipients to be able to refuse such communications. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 01 Jan 2023 | MASLUZ ENERGY POWER, S.L.MASLUZ ENERGY POWER, S.L. was fined EUR 90,000 by the AEPD for changing a customer's energy provider without authorization. The authority also found a failure to provide the required information, constituting breaches of GDPR Articles 13 and 6(1). | ES | AEPD | GDPR | €90,000 | ↗ |
| 18 Jun 2015 | Martino MarangellaMartino Marangella was fined EUR 2,400 by the Garante for failing to provide simplified information about the use of a video surveillance system. The authority treated this as a breach of data protection rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 14 Dec 2022 | MÁRMOLES Y GRANITOS MEJIAS, S. L.The company was fined by the AEPD in the amount of 600 EUR for operating a video surveillance system without proper signage and required authorization. This may have infringed the rights of third parties and data protection rules. | ES | AEPD | GDPR | €600 | ↗ |
| 06 Jun 2024 | MÁRMOLES Y GRANITOS MEJIAS, S. L.The entity was fined by the AEPD for operating a video surveillance system with cameras directed toward public areas without the required administrative authorization. It also failed to provide legally compliant informational signage. | ES | AEPD | GDPR | €1,000 | ↗ |
| 17 Jul 2024 | Mark s.r.l.s.Mark s.r.l.s. was fined by the Garante for operating a video surveillance system without the required signage. The case concerned a breach of GDPR information obligations. | IT | Garante | GDPR | €5,000 | ↗ |
| 10 Nov 2016 | Marketing & Comunicazione s.r.l.Marketing & Comunicazione s.r.l. was fined for making an unauthorized advertising phone call. The company also failed to respond to information requests from the Garante. | IT | Garante | GDPR | €4,000 | ↗ |
| 10 Nov 2016 | Marketing & Comunicazione s.r.l.Marketing & Comunicazione s.r.l. was fined by the Garante for making an unsolicited promotional call to a number listed in the public opposition registry. The conduct breached data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |