Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
29 Jul 2025Anonimizirano (IP-RS 0609-18/2025/7)The legal entity was fined by IP-RS for unlawfully processing personal data by redirecting emails without a legal basis. The authority found a breach of the GDPR principle of lawfulness.SIIP-RSGDPR€10,614
07 Jul 2022Anonymisé (CNPD decision-15-fr-2022)The company was fined by the CNPD EUR 10,500 for breaching the data minimization principle and for failing to adequately inform individuals about video surveillance systems. The authority cited violations of GDPR Articles 5(1)(c) and 13.LUCNPDGDPR€10,500
21 Jan 2016CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD EUR 10,500 for sending unsolicited advertising SMS messages without prior recipient consent. The authority also found that no opt-out mechanism was provided, in breach of Article 21 of the LSSI.ESAEPDePrivacy€10,500
22 Apr 2010Cassine di Pietra s.r.l.Cassine di Pietra s.r.l. was fined by the Garante €10,400 for making unsolicited promotional calls using automated systems. The authority found that proper information was not provided and consent had not been obtained, constituting a data protection breach.ITGaranteGDPR€10,400
05 Apr 2012XY s.r.l.XY s.r.l. was fined by the Garante 10,400 EUR for sending unsolicited commercial communications by email despite the recipient's repeated objections. The case indicates a breach of data protection rules governing electronic marketing and respect for opt-out requests.ITGaranteGDPR€10,400
15 Nov 2012Italiasalute s.r.l.Italiasalute s.r.l. was fined by the Garante EUR 10,400 for processing personal data on its website without providing data subjects with adequate information. The authority also found that consent was obtained in a non-compliant manner, particularly for profiling and marketing purposes.ITGaranteGDPR€10,400
04 Oct 2011Mancosu Editore s.r.l.Mancosu Editore s.r.l. was fined by the Garante 10,400 EUR for sending promotional emails without providing the required information to data subjects and without obtaining explicit consent. The conduct breached Articles 13 and 130 of the Italian Data Protection Code.ITGaranteGDPR€10,400
29 Nov 2012Eco Education s.r.l.Eco Education s.r.l. was fined by the Garante 10,400 EUR for sending promotional faxes without prior, specific, and informed consent from recipients. The authority found this to be a breach of data protection rules.ITGaranteGDPR€10,400
15 Sept 2011XY s.r.l.XY s.r.l. was fined by the Garante in the amount of EUR 10,400 for sending an unsolicited promotional fax. The conduct breached data protection and marketing communication rules.ITGaranteGDPR€10,400
09 Nov 2017Consorzio di Polizia locale Valle AgnoConsorzio di Polizia locale Valle Agno was fined EUR 10,400 by the Garante for deploying a mobile video surveillance system and a localization system on employee devices without the required information or prior notification. The authority found this to be a breach of data protection rules.ITGaranteGDPR€10,400
11 Oct 2012Professional Pneus sccrlProfessional Pneus sccrl was fined EUR 10,400 by the Garante. The authority found that personal data were processed without giving users the option to refuse consent for marketing purposes, breaching transparency requirements.ITGaranteGDPR€10,400
22 Oct 2015Liceo scientifico statale Plinio SenioreLiceo scientifico statale Plinio Seniore was fined EUR 10,400 by the Garante for processing biometric data and using video surveillance without providing adequate information to the data subjects. The authority found this conduct to be in breach of the Italian Data Protection Code.ITGaranteGDPR€10,400
20 Jan 2012Manage Consulting International s.r.l.Manage Consulting International s.r.l. was fined by the Italian Garante in the amount of 10,400 EUR. The sanction concerned sending unsolicited promotional faxes without proper consent and required information.ITGaranteGDPR€10,400
08 Mar 2018Carriere Italia s.r.l.Carriere Italia s.r.l. was fined for processing personal data revealing health status without notifying the Garante. The authority also found that required information was not provided to data subjects in job advertisements.ITGaranteGDPR€10,400
22 Apr 2010Cassine di Pietra s.r.l.Cassine di Pietra s.r.l. was fined EUR 10,400 by the Garante for making unsolicited promotional calls using automated systems. The authority found that proper information was not provided and consent had not been obtained.ITGaranteGDPR€10,400
30 Dec 2011Dike Giuridica s.r.l.Dike Giuridica s.r.l. was fined by the Garante in the amount of 10,400 EUR for sending unsolicited commercial emails without prior explicit consent from recipients. The authority also found that the required privacy notice was not provided, in breach of the Italian data protection code.ITGaranteGDPR€10,400
07 Mar 2013Greentel Soc. Coop.Greentel Soc. Coop. was fined by the Garante 10,400 EUR for sending promotional communications by fax without providing adequate information or obtaining explicit consent. The authority found violations of Articles 13 and 130 of the Italian Data Protection Code.ITGaranteGDPR€10,400
08 May 2013Profile 2100 srlProfile 2100 srl was fined EUR 10,400 by the Garante for sending unsolicited promotional communications by fax without valid consent. The case concerned a breach of data protection rules and direct marketing requirements.ITGaranteGDPR€10,400
01 Jun 2016Liceo Scientifico di Stato G. BattagliniLiceo Scientifico di Stato G. Battaglini was fined by the Garante 10,400 EUR for processing staff biometric data without providing the required information. The authority also found that the processing had not been notified as required by law.ITGaranteGDPR€10,400
29 Sept 2011XX s.a.s.XX s.a.s. was fined for sending unsolicited promotional emails without the recipients' explicit consent. The authority also found that the required privacy notice was not provided, constituting a data protection breach.ITGaranteGDPR€10,400