BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Dec 2022 | A.R.N.A.S. CivicoA.R.N.A.S. Civico was fined EUR 6,000 by the Italian authority Garante. The authority found breaches of lawfulness, fairness, transparency, and data minimization principles. | IT | Garante | GDPR | €6,000 | ↗ |
| 01 Dec 2022 | WoolenWoolen was fined EUR 3,000 by the Garante for a video surveillance system that did not meet transparency requirements. The authority cited a breach of GDPR Article 13 and Article 114 of the Italian Privacy Code. | IT | Garante | GDPR | €3,000 | ↗ |
| 01 Dec 2022 | Amazon Italia Logistica s.r.l.Amazon Italia Logistica s.r.l. was fined by the Garante for delaying its response to a data subject’s request to access professional certificates. The authority found a breach of Article 15 GDPR. | IT | Garante | GDPR | €20,000 | ↗ |
| 30 Nov 2022 | CBHNOS S.L.CBHNOS S.L. was fined 500 EUR by the AEPD for installing a video surveillance system that could capture images of public areas. The authority considered this a breach of data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 30 Nov 2022 | SIA "W&G"A fine of EUR 500 was imposed on SIA "W&G" by the DVI. The decision is final and has entered into force. | LV | DVI | GDPR | €500 | ↗ |
| 30 Nov 2022 | INMARAN ASESORES S.L.INMARAN ASESORES S.L. was fined by the AEPD 1,000 EUR for failing to comply with data protection authority resolutions. The breach concerned the obligation to inform data subjects under Article 13 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 30 Nov 2022 | Dane anonimowe (N. B. oraz T. M., wspólników spółki cywilnej Kancelaria)UODO imposed an administrative fine on N. B. and T. M., partners in the civil-law partnership Kancelaria. The authority found that they processed personal data of clients and prospective clients without a legal basis. | PL | UODO | GDPR | €9,799 | ↗ |
| 30 Nov 2022 | OPERATEUR DE TELECOMMUNICATION FIXECNIL imposed a fine of EUR 300,000 on OPERATEUR DE TELECOMMUNICATION FIXE and issued an injunction subject to penalty payments. The case concerns a compliance breach in the area of data protection. | FR | CNIL | GDPR | €300,000 | ↗ |
| 29 Nov 2022 | B.B.B.The entity was fined by the AEPD EUR 300 for installing surveillance cameras that recorded images and sound in public and communal areas without the required authorization. This constituted a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 29 Nov 2022 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD EUR 70,000 for failing to comply with a data subject access request. The case concerned the company’s failure to provide a requested recording of a contract concluded by telephone. | ES | AEPD | GDPR | €70,000 | ↗ |
| 28 Nov 2022 | GAVANOVA DE IMMOBLES, S.L.GAVANOVA DE IMMOBLES, S.L. was fined by the AEPD 2,000 EUR for failing to provide an adequate privacy policy on its website. The authority also found that personal data was shared with a cleaning company without the data subjects’ consent. | ES | AEPD | GDPR | €2,000 | ↗ |
| 25 Nov 2022 | Meta DatasetThe Irish DPC fined Meta Dataset EUR 265,000,000 in inquiry IN-21-4-2. The matter is currently pending appeal. | IE | DPC | GDPR | €265,000,000 | ↗ |
| 25 Nov 2022 | OTP LEASING ROMANIA IFN SAOTP LEASING ROMANIA IFN SA was fined by ANSPDCP for breaching data security provisions. The penalty followed a data breach notification indicating that personal data had not been adequately protected. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 24 Nov 2022 | Azienda per la tutela della salute - ATS SardegnaATS Sardegna was fined by the Garante for breaching data protection principles in its handling of personal data relating to an employee's vaccination status. The authority found violations of lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €4,000 | ↗ |
| 24 Nov 2022 | Dello Russo Giulio ditta individualeThe company was fined for using a biometric fingerprint system to record employee attendance without a valid legal basis. The authority found that the processing did not comply with data protection requirements. | IT | Garante | GDPR | €1,000 | ↗ |
| 24 Nov 2022 | Società Lombarda Sport s.r.l.Società Lombarda Sport s.r.l. was fined by the Garante 4,000 EUR for processing personal data without an adequate legal basis. The authority also found failures to ensure data integrity and confidentiality in connection with the issuance of medical certificates for non-competitive sports activities. | IT | Garante | GDPR | €4,000 | ↗ |
| 24 Nov 2022 | STS Di Prisinzano s.r.l.STS Di Prisinzano s.r.l. was fined EUR 1,000 by the Garante for failing to provide a data subject with an adequate privacy notice during roadside assistance. The authority found a breach of Article 13 GDPR. | IT | Garante | GDPR | €1,000 | ↗ |
| 24 Nov 2022 | SOCIETE FOURNISSANT DE l'ELECTRICITE, DU GAZ ET DES SERVICESCNIL imposed a fine of 600,000 EUR on SOCIETE FOURNISSANT DE l'ELECTRICITE, DU GAZ ET DES SERVICES. The available record indicates an administrative penalty issued by the French data protection authority. | FR | CNIL | GDPR | €600,000 | ↗ |
| 24 Nov 2022 | D. B.B.B.The entity was fined EUR 300 by the AEPD for installing surveillance cameras on a building facade facing public areas without prior administrative authorization. The authority found this to be a breach of Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 24 Nov 2022 | CARROZADOS TECAI, S.L.CARROZADOS TECAI, S.L. was fined by the AEPD EUR 300 for installing a surveillance camera that could capture public areas without proper authorization. The authority also found inadequate informational signage for affected individuals, in breach of Article 13 GDPR. | ES | AEPD | GDPR | €300 | ↗ |