Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
06 Mar 2023	B.B.B.The entity was fined by the AEPD €5,000 for publishing radio amateurs’ personal data on a Telegram channel. The breach involved linking call signs to personal information, which violated data protection rules.	ES	AEPD	GDPR	€5,000	↗
11 Mar 2022	CINCON S.C.CINCON S.C. was fined EUR 500 by the AEPD for failing to provide adequate information about the retention period of personal data collected through a website form. The authority found a breach of Article 13 GDPR because data subjects were not given the required notice.	ES	AEPD	GDPR	€500	↗
01 Jan 2019	VODAFONE ESPAÑA, S.A.UVodafone España, S.A.U was fined by the AEPD in the amount of 2,500 EUR for sending unsolicited advertising messages to a business phone number without consent. The case concerned Article 21 of the LSSI, which governs marketing communications without prior recipient consent.	ES	AEPD	ePrivacy	€2,500	↗
23 Apr 2021	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 50,000 EUR for changing a customer's mobile line ownership without consent. The company also charged the customer's account amounts related to a third party's phone line.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2023	Vodafone España, S.A.U.The AEPD fined Vodafone España EUR 70,000 for providing a SIM card duplicate to a third party without the data subject's consent. This enabled unauthorized access to personal and banking information.	ES	AEPD	GDPR	€70,000	↗
30 Aug 2023	LORO PARQUE, S.A.LORO PARQUE, S.A. was fined by the AEPD 250,000 EUR for processing biometric data without a proper legal basis. The authority classified this as a very serious breach of Article 9 GDPR.	ES	AEPD	GDPR	€250,000	↗
23 Aug 2021	AD735 DATA MEDIA ADVERTISING S.L.AD735 DATA MEDIA ADVERTISING S.L. was fined EUR 15,000 by the AEPD for failing to comply with a resolution concerning the right of access. The authority cited a breach of Article 83(6) GDPR.	ES	AEPD	GDPR	€15,000	↗
02 Oct 2020	INSTITUTO DEL DAÑO CEREBRAL Y PSÍQUICO, S.L.The entity did not provide timely access to clinical records, which constituted a breach of data protection obligations. Deficiencies were also identified in the website's cookie policy, leading the AEPD to impose a fine.	ES	AEPD	ePrivacy	€3,000	↗
18 Apr 2023	B.B.B.A neighbor installed a surveillance camera aimed at the public street without authorization. The authority found this breached the data minimization principle under GDPR Article 5(1)(c).	ES	AEPD	GDPR	€300	↗
07 May 2024	PINKGREEN BARCELONA, S.L.PINKGREEN BARCELONA, S.L. was fined by the AEPD 4,000 EUR for disclosing personal data of individuals in responses to negative Google reviews. The authority found that the processing breached Articles 6 and 9 of the GDPR.	ES	AEPD	GDPR	€4,000	↗
22 Feb 2023	MUNDOVIAJES2010, S.L.MUNDOVIAJES2010, S.L. was fined by the AEPD in the amount of 7,000 EUR for processing personal data without consent. The authority also found a failure to provide the required information about data processing, in breach of GDPR Articles 6(1) and 14.	ES	AEPD	GDPR	€7,000	↗
09 Sept 2025	EVELB TÉCNICAS Y SISTEMAS, S.LEVELB TÉCNICAS Y SISTEMAS, S.L was fined by the AEPD 5,000 EUR for breaching Article 5(1)(f) GDPR. The case concerned inadequate data security measures that caused a temporary loss of data availability.	ES	AEPD	GDPR	€5,000	↗
24 Mar 2023	NATURGESTYGAS, S.L.NATURGESTYGAS, S.L. was fined EUR 10,000 by the AEPD for processing personal data without a legal basis. The company charged a customer despite having no contract or consent, which breached the legality requirement for processing.	ES	AEPD	GDPR	€10,000	↗
15 Mar 2024	LEADDESK, S.L.LEADDESK, S.L. was fined by the AEPD for failing to provide information requested by the data protection authority during an investigation. The conduct breached Article 58(1) GDPR and hindered supervisory oversight.	ES	AEPD	GDPR	€6,000	↗
31 Oct 2022	TECNO MOTOR LA MUELA, S.L.L.TECNO MOTOR LA MUELA, S.L.L. was fined by the AEPD €600 for installing surveillance cameras oriented toward public areas without prior administrative authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€600	↗
17 May 2011	LA CIGUEÑA DEL BEBE, S.L.LA CIGUEÑA DEL BEBE, S.L. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial emails without recipient consent. The case concerned Article 21.1 of the LSSI, which governs electronic marketing communications.	ES	AEPD	ePrivacy	€1,800	↗
01 Jan 2015	OCIO MANAGEMENT S.L.OCIO MANAGEMENT S.L. was fined EUR 600 by the AEPD for sending unsolicited advertising messages via WhatsApp without consent. The authority also found that the company failed to provide the required data processing information on its website.	ES	AEPD	ePrivacy	€600	↗
23 Sept 2021	TELEFÓNICA MÓVILES ESPAÑA, S.A.U.TELEFÓNICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD EUR 1,000,000 for failing to adequately prevent unauthorized SIM card duplication. The breach enabled access to confidential information and caused financial losses for customers.	ES	AEPD	GDPR	€1,000,000	↗
21 May 2025	SILVANERGIA 2022, S.L.SILVANERGIA 2022, S.L. was fined by the AEPD EUR 5,000 for processing personal data without a legal basis, in breach of Article 6(1) GDPR. The case involved misleading a customer into confirming personal data over the phone.	ES	AEPD	GDPR	€5,000	↗
19 Feb 2024	DHL PARCEL IBERIA, S.L.U.DHL Parcel Iberia, S.L.U. was fined by the AEPD 5,000 EUR for failing to implement appropriate technical and organizational measures to ensure security appropriate to the risk, as required by Article 32 GDPR. As a result, personal data, including phone numbers, were exposed on shipping labels.	ES	AEPD	GDPR	€5,000	↗

Fine Tracker.