Order report
BULLETIN №082Last updated · 01 Aug 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
28 Apr 2022Ministero della DifesaMinistero della Difesa was fined EUR 10,000 by the Garante for improperly disclosing personal data, including health-related information, to unauthorized personnel. The authority found a breach of the principles of lawfulness, fairness, and transparency.ITGaranteGDPR€10,000↗
27 Apr 2022DIARIO ABC, S.L.DIARIO ABC, S.L. was fined 50,000 EUR by the AEPD for publishing audio of a victim's testimony in a high-profile court case. The authority found that the publication could identify the victim and therefore breached data protection rules.ESAEPDGDPR€50,000↗
27 Apr 202220 MINUTOS EDITORA, S.L.20 MINUTOS EDITORA, S.L. was fined by the AEPD 50,000 EUR for publishing audio of a victim’s court statement in a high-profile case. The authority found a breach of data protection rules.ESAEPDGDPR€50,000↗
27 Apr 2022B.B.B.The entity was fined by the AEPD in the amount of EUR 300 for improperly positioning a surveillance camera. The authority found that the device could capture a private parking area and personal data without sufficient justification.ESAEPDGDPR€300↗
26 Apr 2022CORPORACIÓN DE RADIO Y TELEVISIÓN ESPAÑOLA S.A.The company published audio of a victim's court statement in a high-profile case. The authority found a breach of the data minimization principle because excessive personal data was processed.ESAEPDGDPR€50,000↗
25 Apr 2022Budapest Főváros XVIII. kerület Pestszentlőrinc - Pestszentimre ÖnkormányzataThe authority fined the municipality for failing to provide adequate information to data subjects about the collection and use of their personal data. It also found processing of personal and health data without a valid legal basis or proper consent.HUNAIHGDPR€8,010↗
24 Apr 2022SMART ELECTRIC SOLUTIONS, S.L.SMART ELECTRIC SOLUTIONS, S.L. was fined by the AEPD 800 EUR for installing a surveillance camera that captured public transit areas without proper warning signage. The authority found a breach of data minimization and the information duty under GDPR Articles 5(1)(c) and 13.ESAEPDGDPR€800↗
22 Apr 2022CÍTRICOS TANTA, S.L.CÍTRICOS TANTA, S.L. was fined by the AEPD for processing personal data without consent. The case involved registering an individual in the Social Security system without their knowledge or agreement.ESAEPDGDPR€5,000↗
22 Apr 2022Magyar Kétfarkú Kutya PártThe Hungarian party Magyar Kétfarkú Kutya Párt was fined by NAIH for failing to implement adequate security measures when storing supporter and activist data. The authority found breaches of GDPR Articles 32 and 5.HUNAIHGDPR€8,100↗
22 Apr 2022Anonymisé (CNPD decision-10-fr-2022)The public transport organization breached GDPR requirements on storage limitation, data minimization, and providing adequate information to data subjects. CNPD imposed a fine of EUR 4,000.LUCNPDGDPR€4,000↗
22 Apr 2022DISPLAY CONNECTORS, S.LDISPLAY CONNECTORS, S.L was fined EUR 300,000 by the AEPD for automatically publishing videos containing personal data without first ensuring the processing was lawful. The authority found this conduct breached data protection rules.ESAEPDGDPR€300,000↗
22 Apr 2022Anonymisé (CNPD decision-11-fr-2022)The company did not meet the information obligations under Article 13 GDPR in relation to video surveillance and employee geolocation systems. CNPD imposed an administrative fine of EUR 1,500.LUCNPDGDPR€1,500↗
21 Apr 2022SIA "Your Move"SIA "Your Move" was fined EUR 1,464.13 by the DVI. The decision has entered into force.LVDVIGDPR€1,464↗
20 Apr 2022Anonymisé (CNPD decision-09-fr-2022)The CNPD fined the company EUR 2,000 for failing to respond in time to a data subject access request and for not providing all required information under GDPR Articles 12 and 15. The company also failed to cooperate with the supervisory authority, contrary to Article 31 GDPR.LUCNPDGDPR€2,000↗
19 Apr 2022INGENIERÍA Y TELECOM JAÉN, S.L.INGENIERÍA Y TELECOM JAÉN, S.L. was fined 10,000 EUR by the AEPD. The authority found that the company renewed a customer's service promotion without consent, in breach of Article 6 GDPR.ESAEPDGDPR€10,000↗
18 Apr 2022SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.The company changed the electricity and gas supplier without the customer's consent. This constituted a breach of data protection rules and led to a fine imposed by the AEPD.ESAEPDGDPR€30,000↗
16 Apr 2022ORI, S.l.ORI, S.l. was fined by the AEPD 2,000 EUR for failing to provide a privacy policy on its website. Personal data was collected through multiple forms, which constituted a breach of data protection rules.ESAEPDGDPR€2,000↗
15 Apr 2022SOCIETE D'EDITION DE LOGICIELS APPLICATIFSCNIL imposed a fine of 1,500,000 EUR on SOCIETE D'EDITION DE LOGICIELS APPLICATIFS. The record indicates a regulatory breach, but no further details are provided.FRCNILGDPR€1,500,000↗
13 Apr 2022PYRAMID CONSULTINGPYRAMID CONSULTING was fined by the AEPD EUR 30,000 for unlawful processing of personal data. The company incorrectly identified an individual as responsible for a traffic violation, which led to an improper administrative sanction.ESAEPDGDPR€30,000↗
12 Apr 2022Minister van FinanciënThe Dutch Data Protection Authority imposed a fine on the Minister of Finance for improper processing of personal data in the Fraud Signaling Facility (FSV) application by the Tax and Customs Administration. The authority found breaches of lawfulness, purpose limitation, accuracy, and storage limitation principles.NLAPGDPR€3,700,000↗