BULLETIN №082Last updated · 02 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 03 Mar 2022 | B.B.B.The entity was fined EUR 300 by the AEPD for implementing a video surveillance system that did not comply with data protection rules. The authority found a breach of the data minimization principle and a failure to provide adequate information to data subjects. | ES | AEPD | GDPR | €300 | ↗ |
| 03 Mar 2022 | A.A.A.The entity was fined for operating a video surveillance system with cameras directed toward public areas without proper signage. This breached data protection rules and the information obligations owed to individuals being recorded. | ES | AEPD | GDPR | €600 | ↗ |
| 02 Mar 2022 | SIA "Tērbatas ezītis miglā"A fine of EUR 500 was imposed and has entered into force. The case concerns a DVI decision against SIA "Tērbatas ezītis miglā". | LV | DVI | GDPR | €500 | ↗ |
| 02 Mar 2022 | Személyes adatok nyilvánosságra hozatala online tudakozóbanThe entity did not delete personal data from an online directory after the data subject requested removal. It also failed to demonstrate a lawful basis or consent for publication, resulting in a breach of accountability and unlawful disclosure of personal data. | HU | NAIH | GDPR | Ft 5,000,000 | ↗ |
| 02 Mar 2022 | Közös Nevező 2018 párt és dr. Gődény György aláírásgyűjtéshez kapcsolódó adatkezelésének jogszerűségeThe NAIH imposed a HUF 3,000,000 fine on entities involved in a signature campaign against mandatory vaccinations. The authority found that personal data were collected without meeting GDPR requirements on lawfulness, purpose limitation, transparency, and information provision. | HU | NAIH | GDPR | €7,860 | ↗ |
| 02 Mar 2022 | FUENTES VISIÓN, S.L.FUENTES VISIÓN, S.L. was fined by the AEPD 500 EUR for continuing to send marketing emails despite requests to unsubscribe and delete personal data. The authority found a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €500 | ↗ |
| 01 Mar 2022 | PREICO JURÍDICOS, S.L.PREICO JURÍDICOS, S.L. was fined EUR 2,000 by the AEPD for deficiencies in its cookie policy. The authority found that the website did not provide the required information or obtain consent for storing and accessing data, in breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Mar 2022 | VODAFONE ESPAÑA, S.A.U.Vodafone España was fined by the AEPD for failing to adequately prevent unauthorized SIM card duplication. The incident enabled fraudulent access and transactions on a customer's accounts. | ES | AEPD | GDPR | €140,000 | ↗ |
| 01 Mar 2022 | SIA "SOAAR"SIA "SOAAR" was fined 600 EUR. The decision has entered into force. | LV | DVI | GDPR | €600 | ↗ |
| 01 Mar 2022 | CLUB NATACIO LLEIDACLUB NATACIO LLEIDA installed a surveillance camera in a rented bar/restaurant without informing the tenant or displaying the required signage. The AEPD found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,200 | ↗ |
| 25 Feb 2022 | B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing a surveillance camera that captured a public transit area. The footage was then disseminated without consent, which constituted a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 25 Feb 2022 | FINCAS ARENYS SLFINCAS ARENYS SL was fined by the AEPD 3,000 EUR for failing to provide consent documentation and information on data processing to a prospective tenant. The company also did not respond to requests for the contact details of its Data Protection Officer. | ES | AEPD | GDPR | €3,000 | ↗ |
| 25 Feb 2022 | DIGITAL CONTENT DISTRIBUTION LTD.DIGITAL CONTENT DISTRIBUTION LTD. was fined by the AEPD EUR 100 for sending marketing emails without the recipient's consent. The conduct breached Article 21 of the LSSI on electronic commercial communications. | ES | AEPD | ePrivacy | €100 | ↗ |
| 24 Feb 2022 | DPG Media Magazines B.V.DPG Media Magazines B.V. was fined for obstructing data subjects’ access to and erasure of their personal data by imposing unnecessary barriers. The authority found this conduct breached Article 12(2) GDPR. | NL | AP | GDPR | €525,000 | ↗ |
| 22 Feb 2022 | Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc”The law firm Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc” was fined by ANSPDCP for violating GDPR provisions. The penalty amounted to EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 22 Feb 2022 | VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 70,000 EUR for issuing a duplicate SIM card to a third party without proper authorization. This enabled unauthorized access to the complainant’s bank data and resulted in fraudulent transactions. | ES | AEPD | GDPR | €70,000 | ↗ |
| 22 Feb 2022 | RAMONA FILMS, S.L.RAMONA FILMS, S.L. was fined 10,000 EUR by the AEPD. The authority found processing of personal data of minors under 14 without proper consent and non-compliance with website cookie policy requirements. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 21 Feb 2022 | RECICLAJES ECOLÓGICOS MELJACAN, S.L.The company was fined by the AEPD for breaching data protection rules. The authority found that the website did not meet the required information and consent standards for data processing and cookie policies. | ES | AEPD | ePrivacy | €7,000 | ↗ |
| 17 Feb 2022 | VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined EUR 70,000 by the AEPD for issuing a duplicate SIM card to a third party without the customer's consent. This enabled unauthorized access to the customer's bank account. | ES | AEPD | GDPR | €70,000 | ↗ |
| 16 Feb 2022 | FEDERACION CASTELLANO-LEONESA DE SALVAMENTO Y SOCORRISMOThe organization was fined EUR 2,000 by the AEPD for requiring participants to consent to data processing and image rights transfers without any option to refuse. The authority found this incompatible with Article 6(1) GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |