Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
24 Aug 2022B.B.B.The entity installed a video surveillance camera covering common areas without authorization from the homeowners' association. The authority found this to be a breach of data protection rules.ESAEPDGDPR€600
23 Aug 2022Anonymisiert (DSB 2022-0.585.764)The responsible party unlawfully processed personal data by installing a hidden WiFi camera in a public restroom. This breached the GDPR principles of lawfulness, purpose limitation, and data minimization, and the data subjects were not informed.ATDSBGDPR€25,000
23 Aug 2022Geanonimiseerd (APD 129/2022)The Litigation Chamber imposed a fine for insufficient technical and organizational measures to protect data security. This led to unauthorized access to personal documents.BEAPDGDPR€2,500
22 Aug 2022Enel Energie Muntenia S.A.The company was fined by ANSPDCP for failing to implement sufficient security measures. The breach concerned inadequate safeguards required to protect data.ROANSPDCPGDPR€10,000
22 Aug 2022COMUNIDAD DE PROPIETARIOS ***COMUNIDAD.1The entity installed a video surveillance camera in a common area without proper signage. This breached Article 13 GDPR because individuals in the monitored area were not given the required information.ESAEPDGDPR€300
19 Aug 2022Fidesz-Magyar Polgári SzövetségFidesz-Magyar Polgári Szövetség was fined by NAIH 300,000 HUF for unlawfully processing personal data, including phone numbers, without a legal basis. The authority also found violations of the rights to erasure and access, as well as inadequate information provided during phone campaigns.HUNAIHGDPR€735
18 Aug 2022niegoThe Polish DPA (UODO) imposed an administrative fine of PLN 4,569 on an individual. The authority found a failure to cooperate with the President of UODO and a failure to provide access to information necessary for the performance of its duties.PLUODOGDPR€967
16 Aug 2022Fiziska personaA fine of EUR 200 was imposed. The decision has entered into force.LVDVIGDPR€200
16 Aug 2022Dane anonimowe (N. Ośrodek Kultury z siedzibą w N. przy ul.)UODO imposed an administrative fine of PLN 2,500 on the Cultural Centre. The authority found that personal data were entrusted for processing without a written data processing agreement and without verifying whether the processor provided sufficient technical and organizational safeguards under the GDPR.PLUODOGDPR€531
14 Aug 2022INVERTIA TENERIFE 2019, S.L.INVERTIA TENERIFE 2019, S.L. was fined 2,000 EUR by the AEPD for failing to inform data subjects about the processing of their personal data. The authority treated this as a breach of Article 13 GDPR.ESAEPDGDPR€2,000
11 Aug 2022AMPLIFON Magyarország Kereskedelmi és Szolgáltató Korlátolt Felelősségű TársaságAMPLIFON Magyarország was fined by the NAIH 80,000,000 HUF for processing personal data for market research without proper notice to data subjects, without a specific and legitimate purpose, and without a valid legal basis. The authority found that the company’s conduct breached core GDPR principles.HUNAIHGDPRFt 80,000,000
11 Aug 2022Lakásszövetkezeti adatközlő lapon gyűjtött személyes adatokThe entity was fined for requiring housing cooperative members to provide unnecessary personal data and for giving inadequate information about data processing. The authority found violations of GDPR Articles 6 and 13.HUNAIHGDPR€508
11 Aug 2022Lolland KommuneLolland Kommune was fined 50,000 DKK for failing to implement basic security measures. Employees were able to disable passwords on mobile devices, exposing sensitive citizen data to unauthorized access.DKDatatilsynetGDPR€6,721
09 Aug 2022XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined 5,000 EUR by the AEPD for sending commercial SMS messages without the recipient’s consent. The authority found this conduct breached Article 21 of the LSSI.ESAEPDePrivacy€5,000
09 Aug 2022Denmar Nacrut SRLANSPDCP imposed a fine of EUR 1,000 on Denmar Nacrut SRL for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements.ROANSPDCPGDPR€1,000
09 Aug 2022Denmar Nacrut SRLDenmar Nacrut SRL was fined EUR 1,500 by ANSPDCP for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements.ROANSPDCPGDPR€1,500
09 Aug 2022Nemzeti Egészségbiztosítási AlapkezelőNemzeti Egészségbiztosítási Alapkezelő was fined by NAIH 500,000 HUF. The authority found that the organization failed to provide transparent information to data subjects and did not cooperate during the inspection, breaching GDPR transparency and accountability principles.HUNAIHGDPR€1,260
09 Aug 2022SC Wabag Water Services SRLIn June 2022, ANSPDCP completed an investigation at SC Wabag Water Services SRL and found a breach of GDPR provisions. As a result, a fine of EUR 1,000 was imposed.ROANSPDCPGDPR€1,000
09 Aug 2022CDI Transport Intern și Internațional SRLThe company was fined for failing to provide requested information within the legal deadline. The authority treated this as a breach of GDPR requirements.ROANSPDCPGDPR€7,000
08 Aug 2022EUROPYMES SERVICIOS INTEGRALES S.L.EUROPYMES SERVICIOS INTEGRALES S.L. failed to comply with a data deletion request, which constitutes a breach of Article 17 GDPR. The AEPD imposed a fine of EUR 1,000, later reduced due to early payment.ESAEPDGDPR€1,000