BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 24 Oct 2013 | Comune di Torre CajetaniComune di Torre Cajetani was fined by the Garante for unlawfully publishing an individual's health data on a public notice board. The conduct breached privacy and personal data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 14 Sept 2006 | Asl n. 8 di Asolo (TV)Asl n. 8 di Asolo was fined by the Garante for failing to notify the processing of personal data revealing health and sexual life. The notification was required under the Italian Privacy Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 26 Nov 2020 | Reti Televisive Italiane S.p.a.Reti Televisive Italiane S.p.a. was fined EUR 10,000 by the Garante for broadcasting a segment on “Le Iene” that included footage of an individual recorded without consent. The person was identifiable, which constituted a breach of data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 01 Jan 2019 | IKEA IBERICA, S.A.U.The AEPD fined IKEA IBERICA, S.A.U. 10,000 EUR for installing cookies on users’ devices without obtaining prior informed consent. The authority found this breached Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 06 Jul 2022 | Uniwersyteckie CentrumThe Polish DPA (UODO) imposed an administrative fine of PLN 10,000 on Uniwersyteckie Centrum Kliniczne Uniwersytetu Medycznego. The authority found that the entity failed to report the personal data breach without undue delay and did not notify the affected individuals without undue delay. | PL | UODO | GDPR | €2,096 | ↗ |
| 01 Mar 2017 | CENTROS COMERCIALES CARREFOUR S.A.CENTROS COMERCIALES CARREFOUR S.A. was fined by the AEPD €10,000 for sending commercial emails without a valid unsubscribe link. The case concerned non-compliance with electronic communications rules and recipients’ right to opt out easily. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 26 May 2022 | Comune di AfragolaComune di Afragola was fined EUR 10,000 by the Garante for breaching data protection principles, including lawfulness, fairness, transparency, and data minimization. The authority found that personal data had been handled improperly. | IT | Garante | GDPR | €10,000 | ↗ |
| 28 Jul 2016 | IMPACTING EMAIL MARKETING SOLUTIONS, S.L.IMPACTING EMAIL MARKETING SOLUTIONS, S.L. was fined by the AEPD 10,000 EUR for sending unsolicited commercial communications by SMS without recipient consent. The case concerns a breach of data protection and direct marketing rules. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 13 Mar 2025 | IV Casa Firenze Sud di Benedetti Francesco & C. S.a.s.IV Casa Firenze Sud di Benedetti Francesco & C. S.a.s. was fined by the Garante EUR 10,000 for making unsolicited marketing calls without proper consent. The authority found a breach of GDPR rules on data processing and consent. | IT | Garante | GDPR | €10,000 | ↗ |
| 27 May 2021 | Poste Italiane S.p.a.Poste Italiane S.p.a. was fined by the Garante 10,000 EUR for unlawfully communicating a customer's financial data related to a Postepay card to an unauthorized third party. The case concerns a breach of personal data protection and financial confidentiality requirements. | IT | Garante | GDPR | €10,000 | ↗ |
| 01 Jan 2022 | ALPA 57 PRODUCCIONES, S.L.ALPA 57 PRODUCCIONES, S.L. was fined by the AEPD 10,000 EUR for processing personal data without a legal basis. The company impersonated another energy provider and used personal data without consent. | ES | AEPD | GDPR | €10,000 | ↗ |
| 12 Dec 2024 | SOCIETE EXERCANT UNE ACTIVITE DE COMPARATEUR D'AUTO-ECOLES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on SOCIETE EXERCANT UNE ACTIVITE DE COMPARATEUR D'AUTO-ECOLES. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €10,000 | ↗ |
| 10 Apr 2025 | Tensa Art Design S.A.Tensa Art Design S.A. was fined by ANSPDCP EUR 10,000 for GDPR violations related to its website www.lensa.ro. The case concerned non-compliant processing of personal data under data protection requirements. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 24 Feb 2017 | Geoanalysis S.A.Geoanalysis S.A. was fined EUR 10,000 by the HDPA for improper installation and operation of a video surveillance system. The authority found data protection breaches, including failure to notify the authority and inadequate employee information. | GR | HDPA | GDPR | €10,000 | ↗ |
| 21 Apr 2016 | Comune di PozzuoliComune di Pozzuoli was fined EUR 10,000 by the Garante for publishing a minor’s personal data, including health information, on its institutional website. The conduct breached privacy and data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 24 Nov 2016 | Minerv@ s.r.l.Minerv@ s.r.l. was fined by the Garante 10,000 EUR for sending promotional emails to a complainant after they objected and requested deletion of their data. The authority found that the company’s conduct breached data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 13 Sept 2007 | Asl Salerno 2Asl Salerno 2 was fined EUR 10,000 by the Garante for failing to notify personal data processing activities within the required timeframe. The breach concerned the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 05 Apr 2018 | Azienda Ospedaliera Sant’Andrea di RomaAzienda Ospedaliera Sant’Andrea di Roma was fined 10,000 EUR by the Garante. The authority found that the organization failed to designate individuals responsible for data processing, in breach of data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 21 Jun 2018 | Acentro s.r.l.Acentro s.r.l. was fined EUR 10,000 by the Garante for failing to appoint data processors and provide them with the necessary instructions. The case concerns non-compliance with data protection obligations. | IT | Garante | GDPR | €10,000 | ↗ |
| 20 Oct 2022 | Limit Call S.r.l.s.Limit Call S.r.l.s. was fined by the Garante in the amount of 10,000 EUR for making numerous unsolicited phone calls. The authority found that this conduct breached Article 5 of the GDPR. | IT | Garante | GDPR | €10,000 | ↗ |