Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
13 Jun 2022AMADEUS IT GROUP, S.A.AMADEUS IT GROUP, S.A. was fined by the AEPD EUR 5,000 for failing to properly handle a data subject's requests to access and delete personal data. The authority found a breach of Article 12 GDPR because the company did not provide an adequate response.ESAEPDGDPR€5,000
13 Jun 2022SOCIETE D'ENTRETIEN ET REPARATION DE VEHICULESCNIL imposed a liquidation of the penalty payment against SOCIETE D'ENTRETIEN ET REPARATION DE VEHICULES in the amount of EUR 3,900. The measure relates to failure to comply with a prior obligation within the required deadline.FRCNILGDPR€3,900
10 Jun 2022ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined 50,000 EUR by the AEPD for processing personal data without consent. The breach resulted in identity theft in a phone contract.ESAEPDGDPR€50,000
10 Jun 2022WATYANA 786, S. L.WATYANA 786, S. L. was fined by the AEPD EUR 400 for failing to inform individuals about the use of video surveillance at its premises. The authority found a breach of Article 13 GDPR because the required information was not provided to data subjects.ESAEPDGDPR€400
09 Jun 2022Webáruház adatkezelési tájékoztatójaThe authority found a GDPR breach because the website and online store did not provide clear and transparent information about personal data processing. A fine of 300,000 HUF was imposed.HUNAIHGDPRFt 300,000
09 Jun 2022Cribis Credit Management s.r.l.Cribis Credit Management s.r.l. was fined 10,000 EUR by the Garante. The authority found that the company unjustifiably communicated debtor information to third parties, in breach of GDPR Article 5.ITGaranteGDPR€10,000
08 Jun 2022Wens Experience SRLWens Experience SRL was fined EUR 1,500 by ANSPDCP for GDPR violations. The case concerned deficiencies by the company acting as a processor for a data controller.ROANSPDCPGDPR€1,500
08 Jun 2022INMUR JOYEROS, S.L.INMUR JOYEROS, S.L. was fined by the AEPD 300 EUR for failing to properly inform individuals about the video surveillance system in its premises. The authority found a breach of Article 13 GDPR.ESAEPDGDPR€300
06 Jun 2022URQUÍA & BAS, CORREDURÍA DE SEGUROS S.L.URQUÍA & BAS, CORREDURÍA DE SEGUROS S.L. was fined by the AEPD 2,000 EUR for failing to notify a personal data breach in time. The case concerns the Article 33 GDPR obligation to report breaches to the supervisory authority.ESAEPDGDPR€2,000
06 Jun 2022Dane anonimowe (C.)UODO imposed an administrative fine of PLN 15,994 on Anonymous Data (C.). The case concerned the failure to report a personal data breach involving the loss of an employee’s employment certificate.PLUODOGDPR€3,491
03 Jun 2022Kaufland România SCSKaufland România SCS was fined EUR 2,000 by ANSPDCP for failing to follow internal complaint procedures. This allowed a security guard to improperly access and misuse personal data, resulting in a breach of data confidentiality.ROANSPDCPGDPR€2,000
02 Jun 2022BANCO BILBAO VIZCAYA ARGENTARIA, S.A.Banco Bilbao Vizcaya Argentaria, S.A. was fined by the AEPD for continuing to send investment reports by postal mail despite the complainant’s request to receive them by email. The authority found a breach of the right to object and to stop data processing.ESAEPDGDPR€70,000
02 Jun 2022B.B.B.The entity was fined by the AEPD for improperly positioning surveillance cameras toward public areas without proper signage. This conduct breached data protection requirements.ESAEPDGDPR€1,000
31 May 2022DKN.5131.51.2021StatusuchylonaTytuUODO imposed an administrative fine of PLN 10,000 for a breach involving the recording and storage of sound in a monitoring system. The case concerned improper use of CCTV monitoring with audio capture.PLUODOGDPR€2,183
31 May 2022B.B.B.The entity was fined for using a surveillance camera with audio to monitor an employee without prior notice. The authority found this to be a breach of data protection rules.ESAEPDGDPR€5,000
30 May 2022DIGITECNIA SOLUTIONS, S.L.DIGITECNIA SOLUTIONS, S.L. was fined by the AEPD 2,000 EUR for publishing an image on its website without authorization. The authority found this to be a breach of Article 6 of the GDPR.ESAEPDGDPR€2,000
30 May 2022ASOCIACIÓN CONTRA LA CORRUPCION Y EN DEFENSA DE LA ACCIÓN PÚBLICAACODAP was fined EUR 10,000 by the AEPD for publishing complainants’ personal data on its website without anonymization. The authority found this conduct to be contrary to GDPR Article 5(1)(b).ESAEPDGDPR€10,000
30 May 2022MARIELI GABRIELA, S.L.MARIELI GABRIELA, S.L. was fined by the AEPD in the amount of 3,000 EUR for charging amounts to the complainant's bank account without consent. The authority found a breach of Article 6(1) GDPR, meaning there was no lawful basis for the processing.ESAEPDGDPR€3,000
27 May 2022B.B.B.B.B.B. was fined EUR 2,000 by the AEPD for failing to provide adequate data protection information in rental contract documentation. The authority found a breach of Article 13 GDPR.ESAEPDGDPR€2,000
27 May 2022COMUNIDAD PROPIETARIOS ***COMUNIDAD.1The community of property owners was fined by the AEPD EUR 600 for using a surveillance system that recorded audio in common areas. The authority found the measure excessive and unnecessary and also noted insufficient information on the surveillance signs.ESAEPDGDPR€600