BULLETIN №083Last updated · 07 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 25 Feb 2022 | B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing a surveillance camera that captured a public transit area. The footage was then disseminated without consent, which constituted a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 25 Feb 2022 | FINCAS ARENYS SLFINCAS ARENYS SL was fined by the AEPD 3,000 EUR for failing to provide consent documentation and information on data processing to a prospective tenant. The company also did not respond to requests for the contact details of its Data Protection Officer. | ES | AEPD | GDPR | €3,000 | ↗ |
| 25 Feb 2022 | DIGITAL CONTENT DISTRIBUTION LTD.DIGITAL CONTENT DISTRIBUTION LTD. was fined by the AEPD EUR 100 for sending marketing emails without the recipient's consent. The conduct breached Article 21 of the LSSI on electronic commercial communications. | ES | AEPD | ePrivacy | €100 | ↗ |
| 01 Mar 2022 | PREICO JURÍDICOS, S.L.PREICO JURÍDICOS, S.L. was fined EUR 2,000 by the AEPD for deficiencies in its cookie policy. The authority found that the website did not provide the required information or obtain consent for storing and accessing data, in breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Mar 2022 | VODAFONE ESPAÑA, S.A.U.Vodafone España was fined by the AEPD for failing to adequately prevent unauthorized SIM card duplication. The incident enabled fraudulent access and transactions on a customer's accounts. | ES | AEPD | GDPR | €140,000 | ↗ |
| 01 Mar 2022 | SIA "SOAAR"SIA "SOAAR" was fined 600 EUR. The decision has entered into force. | LV | DVI | GDPR | €600 | ↗ |
| 01 Mar 2022 | CLUB NATACIO LLEIDACLUB NATACIO LLEIDA installed a surveillance camera in a rented bar/restaurant without informing the tenant or displaying the required signage. The AEPD found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,200 | ↗ |
| 02 Mar 2022 | SIA "Tērbatas ezītis miglā"A fine of EUR 500 was imposed and has entered into force. The case concerns a DVI decision against SIA "Tērbatas ezītis miglā". | LV | DVI | GDPR | €500 | ↗ |
| 02 Mar 2022 | Személyes adatok nyilvánosságra hozatala online tudakozóbanThe entity did not delete personal data from an online directory after the data subject requested removal. It also failed to demonstrate a lawful basis or consent for publication, resulting in a breach of accountability and unlawful disclosure of personal data. | HU | NAIH | GDPR | Ft 5,000,000 | ↗ |
| 02 Mar 2022 | Közös Nevező 2018 párt és dr. Gődény György aláírásgyűjtéshez kapcsolódó adatkezelésének jogszerűségeThe NAIH imposed a HUF 3,000,000 fine on entities involved in a signature campaign against mandatory vaccinations. The authority found that personal data were collected without meeting GDPR requirements on lawfulness, purpose limitation, transparency, and information provision. | HU | NAIH | GDPR | €7,860 | ↗ |
| 02 Mar 2022 | FUENTES VISIÓN, S.L.FUENTES VISIÓN, S.L. was fined by the AEPD 500 EUR for continuing to send marketing emails despite requests to unsubscribe and delete personal data. The authority found a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €500 | ↗ |
| 03 Mar 2022 | AUTOMOVILES FERSAN, S.A.AUTOMOVILES FERSAN, S.A. used personal data without consent to include it in a vehicle purchase contract. The AEPD imposed a fine of EUR 5,000 for breaching data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 03 Mar 2022 | B.B.B.The entity was fined EUR 300 by the AEPD for implementing a video surveillance system that did not comply with data protection rules. The authority found a breach of the data minimization principle and a failure to provide adequate information to data subjects. | ES | AEPD | GDPR | €300 | ↗ |
| 03 Mar 2022 | A.A.A.The entity was fined for operating a video surveillance system with cameras directed toward public areas without proper signage. This breached data protection rules and the information obligations owed to individuals being recorded. | ES | AEPD | GDPR | €600 | ↗ |
| 04 Mar 2022 | ENDESA ENERGÍA, S.A.U.ENDESA ENERGÍA, S.A.U. was fined EUR 50,000 by the AEPD for a personal data protection violation. The case involved unauthorized changes to a contract holder's information, resulting in a security breach under Article 32 of the GDPR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 07 Mar 2022 | DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD for improperly handling a SIM card duplication request. The failure led to unauthorized transactions on a customer's bank account and was found to breach Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 07 Mar 2022 | DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 70,000 EUR for issuing a duplicate SIM card to a third party without proper identity verification. The incident enabled unauthorized access to a bank account and resulted in financial loss. | ES | AEPD | GDPR | €70,000 | ↗ |
| 08 Mar 2022 | Harpa tónlistar- og ráðstefnuhús ohf.Harpa tónlistar- og ráðstefnuhús ohf. was fined by Persónuvernd for collecting personal identification numbers and birth dates without necessity. The authority found breaches of GDPR principles of lawfulness, fairness, transparency, and data minimization. | IS | Persónuvernd | GDPR | €6,850 | ↗ |
| 10 Mar 2022 | Anonymisé (CNPD decision-07-fr-2022)The CNPD found that Société A breached the GDPR by failing to comply with data minimization, retention limitation, and information provision requirements. The case concerned improper personal data processing in relation to compliance obligations. | LU | CNPD | GDPR | €3,500 | ↗ |
| 10 Mar 2022 | Agenzia Regionale per la Tutela dell'Ambiente dell'AbruzzoThe Regional Agency for Environmental Protection of Abruzzo was fined by the Garante €8,000 for breaches of data protection principles. The violations concerned lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €8,000 | ↗ |