Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-22.5%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
20 Jun 2023Dante International SADante International SA was fined EUR 10,000 by ANSPDCP for additional violations related to complaints from three individuals in Hungary. The case concerned irregularities identified during the handling of those complaints.ROANSPDCPGDPR€10,000
11 Jan 2023Società Europea di Edizioni S.p.a.The Garante fined Società Europea di Edizioni S.p.a. EUR 10,000 for publishing non-anonymized personal data concerning an individual's health status in an article. This constituted a breach of data protection rules.ITGaranteGDPR€10,000
05 Feb 2015Comune di MerìComune di Merì was fined EUR 10,000 by the Garante for unlawfully publishing sensitive personal data on its website. The disclosure included information about individuals' health status and mandatory medical treatments, breaching data protection rules.ITGaranteGDPR€10,000
13 Sept 2007Asl Enna 4The Garante fined Asl Enna 4 EUR 10,000 for processing personal data, including genetic and biometric data, without the required notification. The authority found this to be a breach of the Italian Data Protection Code.ITGaranteGDPR€10,000
16 Jan 2026Πυροσβεστικό ΣώμαThe Hellenic Data Protection Authority imposed a €10,000 fine on the Fire Service for unlawfully processing an employee’s special-category health data. The authority found breaches of GDPR lawfulness and data minimization principles and noted that the data were accessible through an internal electronic application.GRΑρχή Προστασίας Δεδομένων Προσωπικού ΧαρακτήραGDPR€10,000
19 Feb 2015Andrea AngeloniAndrea Angeloni was fined by the Garante for sending unsolicited promotional letters. The entity also failed to respond to information requests from the supervisory authority.ITGaranteGDPR€10,000
20 Sept 2019IBERDROLA CLIENTES, SAUIBERDROLA CLIENTES, SAU was fined by the AEPD 10,000 EUR for including personal data in the SOLCENT file without the required authorization. The authority found this to be a breach of data protection rules.ESAEPDGDPR€10,000
13 Nov 2025Maviglia Assicurazioni snc di Gherardo Maviglia & c.Maviglia Assicurazioni was fined by the Garante 10,000 EUR for unlawful processing of personal data. The case involved automatic email redirection and indefinite retention of email logs and content, which breached GDPR principles.ITGaranteGDPR€10,000
13 Jun 2024RETSINNAL GROUP, S.L.U.RETSINNAL GROUP, S.L.U. was fined by the AEPD in the amount of 10,000 EUR for failing to comply with cookie management rules on its website. The breach concerned Article 22.2 of the LSSI.ESAEPDePrivacy€10,000
27 Apr 2010Consiglio dell'ordine degli avvocati di Santa Maria Capua VetereConsiglio dell'ordine degli avvocati di Santa Maria Capua Vetere was fined by the Garante for using a biometric system to verify trainee lawyers' attendance without proper authorization. This constituted a breach of data protection rules.ITGaranteGDPR€10,000
13 Feb 2007Asl di Maglie (Lecce)Asl di Maglie (Lecce) was fined by the Garante for failing to notify personal data processing activities within the required timeframe. This constituted a breach of the Italian Data Protection Code.ITGaranteGDPR€10,000
03 Jul 2014Tenacta Group s.p.a.Tenacta Group s.p.a. was fined 10,000 EUR by the Garante for making unsolicited promotional phone calls. The company failed to consult the public opposition register, thereby violating the subscriber's right to object.ITGaranteGDPR€10,000
30 Oct 2013Comune di BolzanoComune di Bolzano was fined 10,000 EUR by the Garante for publishing sensitive health-related information about an employee’s absence on its institutional website. The authority found a breach of data protection rules.ITGaranteGDPR€10,000
24 Nov 2016Provincia di VercelliProvincia di Vercelli was fined EUR 10,000 by the Garante for unlawfully publishing personal data on its institutional website. The disclosed information included photocopies of identity cards and bank account numbers, without an appropriate legal basis.ITGaranteGDPR€10,000
29 Dec 2022UNIVERSITE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on UNIVERSITE (procédure simplifiée). The record indicates a regulatory breach, but no further details are provided.FRCNILGDPR€10,000
08 Feb 2007Asl OristanoAsl Oristano was fined EUR 10,000 by the Garante for failing to notify the processing of personal data concerning health and sexual life. The breach concerned obligations under the Italian Data Protection Code.ITGaranteGDPR€10,000
05 Feb 2015Comune di MontagnarealeThe Garante fined Comune di Montagnareale 10,000 EUR for unlawfully publishing personal data revealing health status on its institutional website. The breach involved disclosure of sensitive data without an adequate legal basis or safeguards.ITGaranteGDPR€10,000
26 Jun 2023B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for uploading sexual and personal content of an ex-partner to YouTube and ForoCoches without consent. The authority found this to be a breach of data protection rules.ESAEPDGDPR€10,000
07 Dec 2023H**** Gemeinnützige Wohnungs AGThe entity was fined for failing to cooperate with the Data Protection Authority during a complaint procedure. It did not respond to requests for statements, which constitutes a breach of Article 31 GDPR.ATDSBGDPR€10,000
22 Feb 2022RAMONA FILMS, S.L.RAMONA FILMS, S.L. was fined 10,000 EUR by the AEPD. The authority found processing of personal data of minors under 14 without proper consent and non-compliance with website cookie policy requirements.ESAEPDePrivacy€10,000