BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 May 2022 | MH VILASECA S.L.MH VILASECA S.L. was fined by the AEPD 400 EUR for installing a video surveillance system without the required informational signage. The authority found this to be a breach of Article 13 GDPR. | ES | AEPD | GDPR | €400 | ↗ |
| 20 May 2022 | THUNDER HUNTER ENERGY ADVISORS, S.L.THUNDER HUNTER ENERGY ADVISORS, S.L. was fined by the AEPD 1,000 EUR for sending unsolicited commercial emails without prior consent. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 20 May 2022 | SERVICIOS PROFESIONALES LA PARADA S.L.The entity installed a video surveillance system that recorded public areas without informing the affected individuals. This breached data protection rules and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €800 | ↗ |
| 19 May 2022 | B.B.B.B.B.B. was fined EUR 600 by the AEPD. The authority found that the video surveillance cameras were improperly oriented, capturing public areas and private property, and that adequate information on data processing responsibilities was not provided. | ES | AEPD | GDPR | €600 | ↗ |
| 18 May 2022 | EURO DONER KEBABEURO DONER KEBAB was fined by the AEPD EUR 300 for improperly directing a video surveillance camera toward a public space without justification. The authority also found that the required informational signage was missing. | ES | AEPD | GDPR | €300 | ↗ |
| 18 May 2022 | SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.The company was fined by the AEPD for unlawfully processing personal data. The breach involved sending a wage garnishment notice via WhatsApp without proper authorization or legal basis. | ES | AEPD | GDPR | €5,000 | ↗ |
| 18 May 2022 | Kredyt Inkaso Investments RO S.A.The company unlawfully processed personal data by disclosing it excessively, including health data. The authority found a breach of personal data processing principles. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 17 May 2022 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined EUR 70,000 by the AEPD for issuing a SIM card duplicate to a third party without the claimant’s consent. The authority also found that the third party’s identity was not verified, constituting a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 17 May 2022 | MAYR MELNHOF PACKAGING ROMANIA S.R.L.The company was fined by ANSPDCP for processing images in a manner that was not adequate, relevant, or limited to what was necessary for the stated purpose. The authority found a breach of the data minimization principle. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 13 May 2022 | UNIDAD EDITORIAL INFORMACIÓN GENERAL, S.L.U.The entity published an audio recording of a victim's court testimony without consent. AEPD found this to be a breach of data protection law and imposed a 50,000 EUR fine. | ES | AEPD | GDPR | €50,000 | ↗ |
| 12 May 2022 | Azienda Socio Sanitaria Territoriale Dei Sette LaghiAzienda Socio Sanitaria Territoriale Dei Sette Laghi was fined by the Garante €7,000 for violations related to the processing of health data. The authority also found insufficient data security measures. | IT | Garante | GDPR | €7,000 | ↗ |
| 12 May 2022 | Minimarket di Alam SaifulThe Garante fined Minimarket di Alam Saiful 1,000 EUR for operating a video surveillance system without the required notice to individuals being recorded. The case concerned a breach of data protection information obligations. | IT | Garante | GDPR | €1,000 | ↗ |
| 12 May 2022 | Zito Auto di Gianfranco ZitoThe company was fined for operating a video surveillance system that did not meet the information requirements under GDPR Article 13 and Article 114 of the Italian Privacy Code. The authority found that the required notices for monitored individuals were not properly provided. | IT | Garante | GDPR | €3,000 | ↗ |
| 12 May 2022 | Hu XiaoyanThe Garante fined Hu Xiaoyan EUR 20,000 for operating a video surveillance system without proper informational signage and required safeguards. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 12 May 2022 | Singh Market S.r.l.The Garante fined Singh Market S.r.l. 2,000 EUR for operating a video surveillance system without the required informational signage. The authority found a breach of Article 13 GDPR. | IT | Garante | GDPR | €2,000 | ↗ |
| 12 May 2022 | LORIS FUEL SHOP SRLLORIS FUEL SHOP SRL was fined EUR 1,000 by ANSPDCP for breaches of GDPR rules on data processing and security measures. The case indicates compliance gaps in personal data protection controls. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 12 May 2022 | CIUDAUTO, S.L.CIUDAUTO, S.L. was fined by the AEPD EUR 1,000 for continuing to send advertising emails despite a request to unsubscribe. The authority found a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 12 May 2022 | CivilstyrelsenThe Danish DPA reported Civilstyrelsen to the police and recommended a fine for failing to implement appropriate security measures and for not reporting a data breach. The case ended with a fine notice of 100,000 DKK. | DK | Datatilsynet | GDPR | €13,439 | ↗ |
| 12 May 2022 | Comune di VillabateComune di Villabate was fined 6,000 EUR for failing to update the Data Protection Officer’s contact details on its website and in communications with the Authority. The conduct was found to breach the principles of lawfulness, fairness, and transparency. | IT | Garante | GDPR | €6,000 | ↗ |
| 11 May 2022 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 70,000 by the AEPD for issuing a duplicate SIM card without the customer's consent. This enabled unauthorized access to the customer's bank account, indicating a serious failure in security and data protection controls. | ES | AEPD | GDPR | €70,000 | ↗ |