BULLETIN №082Last updated · 03 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 30 Dec 2020 | B.B.B.The entity was fined by the AEPD in the amount of 1,500 EUR. The violation concerned installing surveillance cameras directed toward public areas without the required authorization and without compliant informational signage. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2021 | ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINEThe entity was fined by the AEPD 5,000 EUR for failing to comply with a data deletion request and for sending unsolicited marketing emails without consent. The case indicates non-compliance with data subject rights and rules on direct marketing communications. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2021 | LA MAISON DU BAMBOULA MAISON DU BAMBOU was fined EUR 3,000 by the AEPD for sending commercial emails without the recipient's consent. The conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 01 Jan 2021 | AD735 DATA MEDIA ADVERTISING S.L.AD735 DATA MEDIA ADVERTISING S.L. was fined €3,000 by the AEPD for failing to comply with information requests. The case concerned Article 58(1) GDPR and the duty to cooperate with the supervisory authority. | ES | AEPD | GDPR | €3,000 | ↗ |
| 01 Jan 2021 | PAGE GROUP EUROPEPAGE GROUP EUROPE was fined by the AEPD 300,000 EUR for breaches of GDPR principles on data minimization and transparency. The case concerned the improper handling of a data subject access request submitted through its Dutch website. | ES | AEPD | GDPR | €300,000 | ↗ |
| 01 Jan 2021 | MARINS PLAYA, S.A.MARINS PLAYA, S.A. was fined by the AEPD in the amount of EUR 30,000 for unlawfully scanning a customer's passport during hotel registration. The authority found that this breached Article 6 of the GDPR because there was no valid legal basis for the processing. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 Jan 2021 | MAX2PROTECT, S.L.MAX2PROTECT, S.L. was fined by the AEPD 4,000 EUR for sending spam emails without recipient consent. The authority also found unlawful processing of personal data collected from public websites without proper legal basis. | ES | AEPD | GDPR | €4,000 | ↗ |
| 01 Jan 2021 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 50,000 EUR for breaching data protection rules. The case concerned deficiencies in the security and integrity of data processing. | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2021 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined 800,000 EUR by the AEPD for failing to adequately protect personal data. The breach enabled identity fraud and unauthorized access to banking information through SIM card duplication. | ES | AEPD | GDPR | €800,000 | ↗ |
| 01 Jan 2021 | INMARÁN ASESORES, S.L.INMARÁN ASESORES, S.L. was fined 2,000 EUR by the AEPD for recording telephone conversations without informing the data subject or obtaining consent. The authority found this to be a breach of the GDPR information obligations. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2021 | RECLAMADOR, S.L.RECLAMADOR, S.L. was fined €2,000 by the AEPD for sending a commercial electronic communication after the recipient had exercised the right to erasure. The authority found this conduct breached GDPR and LSSI requirements. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2021 | B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for publishing personal data, including DNI/NIF, on a website. The authority found a breach of data minimization principles and GDPR requirements. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 Jan 2021 | COMUNIDAD.1The entity was fined by the AEPD EUR 1,000 for installing a video surveillance system that captured third parties without adequate data protection measures. The authority found breaches of GDPR Articles 5(1)(c) and 13. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2021 | COMUNIDAD DE PROPIETARIOS R.R.R.The community of property owners was fined by the AEPD for collecting excessive personal data in connection with access to the community pool. The authority also found that users were not properly informed about the processing of their personal data. | ES | AEPD | GDPR | €6,000 | ↗ |
| 01 Jan 2021 | COMUNIDAD PROPIETARIOS ***DIRECCIÓN.1The Community of Property Owners was fined by the AEPD EUR 500 for posting on notice boards a list of owners in arrears together with personal data. The information was accessible to third parties, which constituted a breach of data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 01 Jan 2021 | ASOCIACIÓN JEREZ CAPITALThe entity was fined by the AEPD for failing to comply with data protection rules in relation to its website cookie policy. Non-essential cookies were placed on the site without prior user consent. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2021 | DAVISER SERVICIOS, S.L.DAVISER SERVICIOS, S.L. was fined by the AEPD 20,000 EUR for using biometric data from fingerprint readers and surveillance cameras without properly informing employees. The authority found this to be a breach of data protection principles. | ES | AEPD | GDPR | €20,000 | ↗ |
| 01 Jan 2021 | LYNGUAL GMBHLYNGUAL GMBH was fined by the AEPD 3,000 EUR for sending unsolicited commercial emails. The messages continued despite the recipient’s attempts to unsubscribe and requests to stop communications. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 01 Jan 2021 | B.B.B.The sanctioned individual installed a video surveillance camera covering common areas without informed consent. This breached data protection rules and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2021 | JUBASER DE CONTROL, S.L.JUBASER DE CONTROL, S.L. was fined by the AEPD 5,000 EUR for unlawful processing of personal data. The case concerned improper handling of a customer's ID and personal information, which later appeared on an adult contact website. | ES | AEPD | GDPR | €5,000 | ↗ |