BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2023 | NATURGY IBERIA, S.A.Naturgy Iberia was fined for changing a customer's gas and electricity supplier without authorization. The authority found that this breached Article 6(1) of the GDPR because there was no lawful basis for the processing. | ES | AEPD | GDPR | €100,000 | ↗ |
| 01 Jan 2023 | GENERAL LOGISTICS SYSTEMS SPAIN, S.A.GENERAL LOGISTICS SYSTEMS SPAIN, S.A. was fined by the AEPD 140,000 EUR for processing the personal data of two complainants without proper authorization. The breach resulted in identity theft and misuse of personal data. | ES | AEPD | GDPR | €140,000 | ↗ |
| 01 Jan 2023 | GLOVOGLOVO was fined EUR 15,000 by the AEPD for failing to properly handle a data access request. The authority found a breach of Article 15 of the GDPR. | ES | AEPD | GDPR | €15,000 | ↗ |
| 31 Dec 2022 | Meta Platforms Ireland Limited - encompassing two decisions for Facebook & Instagram servicesThe Irish DPC fined Meta Platforms Ireland Limited EUR 390,000,000 in two decisions concerning the Facebook and Instagram services. The case relates to inquiries IN-18-5-5 and IN-18-5-7, and the status is pending appeal. | IE | DPC | GDPR | €390,000,000 | ↗ |
| 30 Dec 2022 | SECURITAS DIREC ESPAÑA, S.A.SECURITAS DIREC ESPAÑA, S.A. was fined by the AEPD 50,000 EUR for failing to provide complete access to personal data logs linked to an alarm system. The case concerned an inadequate response to a data subject access request. | ES | AEPD | GDPR | €50,000 | ↗ |
| 30 Dec 2022 | A&G Couriers Limited T/A Fastway Couriers (Ireland)The Irish DPC fined A&G Couriers Limited T/A Fastway Couriers (Ireland) 15,000 EUR in inquiry IN-21-6-2. The penalty has been collected. | IE | DPC | GDPR | €15,000 | ↗ |
| 30 Dec 2022 | Dane anonimowe (K. S.A. z siedzibą w K. ul.)The President of UODO imposed an administrative fine of PLN 27,418 on the company. The sanction concerned failure to provide access to information necessary for the authority to perform its duties. | PL | UODO | GDPR | €5,858 | ↗ |
| 29 Dec 2022 | Dane anonimowe (S. Sp. z o.o. z siedzibą w W. przy ul.)The President of UODO imposed an administrative fine of PLN 36,558 on the company. The sanction concerned failure to cooperate with the authority and failure to provide information necessary for the performance of its tasks. | PL | UODO | GDPR | €7,802 | ↗ |
| 29 Dec 2022 | SOCIETE DEVELOPPANT DES LOGICIELS DE GESTION ET LA COMMERCIALISATION DE LOGICIELS A DESTINATION DES COLLECTIVITES TERRITORIALES (procédure simplifiée)The CNIL imposed a fine of EUR 15,000 on SOCIETE DEVELOPPANT DES LOGICIELS DE GESTION ET LA COMMERCIALISATION DE LOGICIELS A DESTINATION DES COLLECTIVITES TERRITORIALES under a simplified procedure. The decision concerns a confirmed breach of rules supervised by the CNIL. | FR | CNIL | GDPR | €15,000 | ↗ |
| 29 Dec 2022 | SOCIETE DE DEVELOPPEMENT DE JEUX MOBILESCNIL imposed a fine of 3,000,000 EUR on SOCIETE DE DEVELOPPEMENT DE JEUX MOBILES. The decision concerns a breach of rules examined by the supervisory authority. | FR | CNIL | GDPR | €3,000,000 | ↗ |
| 29 Dec 2022 | SOCIETES EXPLOITANT UNE GAMME DE PLATEFORMES DE DISTRIBUTION DE CONTENUSCNIL imposed a fine of 5,000,000 EUR on SOCIETES EXPLOITANT UNE GAMME DE PLATEFORMES DE DISTRIBUTION DE CONTENUS. The case concerns a breach of rules supervised by CNIL. | FR | CNIL | GDPR | €5,000,000 | ↗ |
| 29 Dec 2022 | SOCIETE CREANT ET COMMERCIALISANT DES PRODUITS ELECTRONIQUES GRAND PUBLIC, DES ORDINATEURS PERSONNELS ET DES LOGICIELSCNIL imposed a fine of 8,000,000 EUR on SOCIETE CREANT ET COMMERCIALISANT DES PRODUITS ELECTRONIQUES GRAND PUBLIC, DES ORDINATEURS PERSONNELS ET DES LOGICIELS. The case concerned breaches of personal data protection rules. | FR | CNIL | GDPR | €8,000,000 | ↗ |
| 29 Dec 2022 | MEDECIN (procédure simplifiée)The CNIL imposed a EUR 5,000 fine on MEDECIN under a simplified procedure. The authority also issued an injunction subject to a penalty payment, indicating the need for prompt remediation. | FR | CNIL | GDPR | €5,000 | ↗ |
| 29 Dec 2022 | UNIVERSITE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on UNIVERSITE (procédure simplifiée). The record indicates a regulatory breach, but no further details are provided. | FR | CNIL | GDPR | €10,000 | ↗ |
| 27 Dec 2022 | Kaufland România SCSKaufland România SCS was fined by ANSPDCP EUR 3,000 for GDPR violations. The investigation was completed in November 2022. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 24 Dec 2022 | EXPLOTACIONES HOSTELERAS Y DE OCIO ALBACETEÑAS, S.L.The entity was fined by the AEPD for breaching data protection rules. Its surveillance cameras were positioned to capture public areas without proper legal authorization. | ES | AEPD | GDPR | €500 | ↗ |
| 22 Dec 2022 | SUDREZIDENȚIAL Broker S.R.L.The company was fined for failing to inform data subjects about a personal data breach. The authority found a violation of Article 34 of the GDPR. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 21 Dec 2022 | Politie NederlandThe Dutch Data Protection Authority fined the police chief for failing to carry out a data protection impact assessment before using mobile camera cars in Rotterdam. The measure created a high risk to individuals' rights and freedoms. | NL | AP | GDPR | €50,000 | ↗ |
| 21 Dec 2022 | Szálláshelyen kamerás megfigyelőrendszer üzemeltetéseThe authority found that the controller unlawfully processed personal data through a camera system, breaching several GDPR provisions. The decision highlighted improper data storage and a lack of transparent information provided to data subjects. | HU | NAIH | GDPR | €7,440 | ↗ |
| 20 Dec 2022 | Webáruház adatkezelése és törlési jog sérelmeThe authority found breaches of several GDPR provisions concerning information to data subjects, obtaining consent for marketing, and handling deletion requests. A fine of HUF 500,000 was imposed. | HU | NAIH | GDPR | €1,240 | ↗ |