Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
09 Sept 2022COMUNIDAD DE PROPIETARIOS R.R.R.COMUNIDAD DE PROPIETARIOS R.R.R. was fined by the AEPD 2,000 EUR for unauthorized access to and dissemination of video surveillance recordings. The case concerns a breach of data protection rules.ESAEPDGDPR€2,000
09 Sept 2022JOLY DIGITAL, S.L.U.JOLY DIGITAL, S.L.U. was fined by the AEPD EUR 20,000 for publishing the complainant’s private Instagram photo without consent. The authority found a breach of Article 6 GDPR because there was no lawful basis for processing the personal data.ESAEPDGDPR€20,000
09 Sept 2022SIA "TET"A fine of EUR 1,200,000 was imposed by the DVI. The case was appealed, and a court judgment was later recorded.LVDVIGDPR€1,200,000
09 Sept 2022SC Raiffeisen Bank SASC Raiffeisen Bank SA was fined by ANSPDCP in the amount of EUR 2,000 for violating Article 5 of the GDPR. The case concerned non-compliance with the basic principles for processing personal data set out in that provision.ROANSPDCPGDPR€2,000
09 Sept 2022Anonymised (HDPA 48/2022)The mayor of a municipality was fined for sending unsolicited emails without the recipients’ consent. The authority found breaches of GDPR transparency and purpose limitation principles.GRHDPAGDPR€2,000
08 Sept 2022Realmedia Network SARealmedia Network SA was fined EUR 8,000 by ANSPDCP for a data processing security breach. The incident involved a service used to operate the imobiliare.ro platform.ROANSPDCPGDPR€8,000
08 Sept 2022GROUPEMENT D'INTÉRÊT ÉCONOMIQUE DES GREFFES DE TRIBUNAUX DE COMMERCE DE FRANCECNIL imposed a fine of 250,000 EUR on GROUPEMENT D'INTÉRÊT ÉCONOMIQUE DES GREFFES DE TRIBUNAUX DE COMMERCE DE FRANCE. The record states that the sanction concerns a violation, but no further details are provided.FRCNILGDPR€250,000
07 Sept 2022LEGAL TRAINING GROUP, S.L.LEGAL TRAINING GROUP, S.L. was fined by the AEPD €1,000 for sending unsolicited commercial communications. The conduct occurred after the complainant had exercised the right to data deletion.ESAEPDePrivacy€1,000
06 Sept 2022B.B.B.The entity failed to provide the information required under Article 13 GDPR when processing personal data. AEPD imposed a fine of EUR 2,000 for this breach.ESAEPDGDPR€2,000
06 Sept 2022MAE WEST SYSTEMS, S.L.MAE WEST SYSTEMS, S.L. was fined EUR 400 by the AEPD for failing to provide the required information on video surveillance signs. The authority found a breach of Article 13 GDPR because individuals under surveillance were not properly informed.ESAEPDGDPR€400
02 Sept 2022B.B.B.The entity was fined by the AEPD 500 EUR for using a video surveillance system that captured an excessive area of public space. In addition, recordings were published on social media without proper authorization or legal basis.ESAEPDGDPR€500
02 Sept 2022Meta (Instagram)The Irish DPC imposed a fine of EUR 405,000,000 on Meta (Instagram) in inquiry IN-20-7-4. The decision is currently under appeal.IEDPCGDPR€405,000,000
02 Sept 2022Fiziska personaA fine of EUR 200 was imposed. The decision has entered into force.LVDVIGDPR€200
01 Sept 2022Liceo Statale "Edoardo Amaldi” di Alzano LombardoLiceo Statale “Edoardo Amaldi” was fined EUR 4,000 by the Garante for violations related to the processing of personal data, including sensitive data. The authority found that the processing lacked a proper legal basis and adequate safeguards.ITGaranteGDPR€4,000
01 Sept 2022B.B.B.The entity was fined for installing surveillance cameras that captured public areas without prior administrative authorization. This constituted a breach of data protection regulations.ESAEPDGDPR€300
31 Aug 2022niegoThe President of UODO imposed a fine of PLN 6,854 on an individual for processing the complainant’s image through video surveillance. The breach consisted of failing to cooperate with the authority and not providing information necessary for it to perform its duties.PLUODOGDPR€1,450
30 Aug 2022Dane anonimowe (T. Spółkę z ograniczoną odpowiedzialnością z siedzibą w W.)The President of UODO imposed an administrative fine of PLN 31,988 on T. Ltd. The authority found that the company failed to provide access to information necessary for the President of UODO to carry out his duties.PLUODOGDPR€6,759
29 Aug 2022Alpha Bank România SAAlpha Bank România SA was fined EUR 1,000 by ANSPDCP for a data security breach. A document was mistakenly sent to the wrong recipient via WhatsApp.ROANSPDCPGDPR€1,000
25 Aug 2022COMUNIDAD PROPIETARIOS R.R.R.The community of owners COMUNIDAD PROPIETARIOS R.R.R. was fined EUR 150 by the AEPD for installing a video surveillance system in the building entrance hall without proper data protection compliance. The authority found a breach of Article 13 GDPR concerning the duty to inform data subjects.ESAEPDGDPR€150
25 Aug 2022B.B.B.A lawyer sent personal data without authorization via WhatsApp for professional promotion. The AEPD found a breach of GDPR Articles 6 and 5(1)(f) and imposed a fine of 4,000 EUR.ESAEPDGDPR€4,000