BULLETIN №082Last updated · 04 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 02 Oct 2020 | GRUPO OCIO DESARROLLO Y SERVICIOS, S.L.The entity was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited commercial communications via WhatsApp. The authority found a breach of the complainant's rights to data protection and to object to data processing. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 22 Mar 2023 | GRUPO MASSIMO DUTTI, S.A.The AEPD fined GRUPO MASSIMO DUTTI, S.A. EUR 5,000 for failing to provide sufficient information and adequate options regarding cookie consent on its website. The authority found a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2012 | GRUPOLIDERTEL S.L.GRUPOLIDERTEL S.L. was fined by the AEPD EUR 2,400 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which prohibits marketing communications without the recipient’s consent. | ES | AEPD | ePrivacy | €2,400 | ↗ |
| 14 Aug 2024 | GRUPO INMOBILIARIO GONTEGA, S.L.GRUPO INMOBILIARIO GONTEGA, S.L. was fined by the AEPD EUR 450 for failing to properly handle a data access request. The authority found a breach of Article 15 GDPR and non-compliance with its resolution. | ES | AEPD | GDPR | €450 | ↗ |
| 01 Jan 2013 | GRUPO FIDES 21 FORMACION, S.L.GRUPO FIDES 21 FORMACION, S.L. was fined EUR 1,200 by the AEPD for sending unsolicited commercial emails. The case concerned a breach of Article 21 of the LSSI, which prohibits such messages without prior consent. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 10 Sept 2012 | GRUPO ENLACE FOCAM S.L.U.GRUPO ENLACE FOCAM S.L.U. was fined by the AEPD EUR 600 for sending an unsolicited commercial email without the recipient’s consent. The case concerned Article 21.1 of the LSSI, which prohibits this type of marketing communication without prior consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 18 Dec 2019 | GRUPO CAROLIZANGRUPO CAROLIZAN was fined EUR 3,000 by the AEPD for installing a video surveillance system that disproportionately captured public space. The authority found no sufficient justification for the scope of monitoring, which infringed the rights of third parties. | ES | AEPD | GDPR | €3,000 | ↗ |
| 13 Jun 2025 | GRUPO BONATEL SLGRUPO BONATEL SL was fined by the AEPD after an incident in which its database was encrypted and a ransom was demanded to prevent public disclosure. The authority found a breach of Article 5(1)(f) GDPR on integrity and confidentiality of personal data. | ES | AEPD | GDPR | €30,000 | ↗ |
| 25 Mar 2014 | GRUPO A4 - FORMACIÓN S.C.GRUPO A4 - FORMACIÓN S.C. was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI despite prior requests for data cancellation. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 29 Oct 2024 | Grue kommuneGrue kommune was fined 250,000 NOK by Datatilsynet after personal data was made accessible in its public journal. The authority found breaches of confidentiality requirements and GDPR rules on legal basis and security. | NO | Datatilsynet | GDPR | €21,113 | ↗ |
| 01 Jan 2020 | GROW BEATS SL.GROW BEATS SL. was fined 3,000 EUR by the AEPD for failing to provide required privacy policy information and for improper use of cookies without user consent. The case concerned website practices and indicates deficiencies in notice and consent requirements. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 21 Aug 2014 | GROUPON SPAIN, S.L.U.Groupon Spain, S.L.U. was fined by the AEPD EUR 30,000 for sending unsolicited commercial emails to the complainant. The authority found that the conduct breached the Spanish LSSI requirements governing marketing communications. | ES | AEPD | ePrivacy | €30,000 | ↗ |
| 21 Mar 2012 | GROUPON SPAIN SLGROUPON SPAIN SL was fined EUR 30,001 by the AEPD for sending unsolicited commercial emails. The messages were sent despite the recipient's requests to unsubscribe, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 06 Sept 2013 | Groupon Greece Monoprosopi Etaireia Periorismenis EfthynisGroupon Greece was fined by the HDPA for failing to inform customers that their credit card data was stored by a third party. The authority found this to be a breach of data protection law. | GR | HDPA | ePrivacy | €1,500 | ↗ |
| 26 Feb 2026 | Groupharma s.r.l.s.Groupharma s.r.l.s. was fined EUR 3,000 by the Italian supervisory authority, Garante. The case concerned the company’s failure to respond to a former employee’s request to access and delete personal data, including photos and contact details, from its website after employment ended. | IT | Garante | GDPR | €3,000 | ↗ |
| 19 Dec 2024 | GROUPEMENT REGIONAL D'APPUI AU DEVELOPPEMENT DE LA E-SANTE (procédure simplifiée)CNIL imposed an administrative fine of EUR 20,000 on GROUPEMENT REGIONAL D'APPUI AU DEVELOPPEMENT DE LA E-SANTE under a simplified procedure. The decision concerns a regulatory breach addressed in the administrative proceeding. | FR | CNIL | GDPR | €20,000 | ↗ |
| 13 Nov 2025 | GROUPEMENT D'INTERET ECONOMIQUE (GIE) EXERCANT UNE ACTIVITE D'ORGANISATION, DE DEVELOPPEMENT ET DE PROMOTION DE CENTRES COMMERCIAUX (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on a GIE engaged in the organization, development, and promotion of shopping centers. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 08 Sept 2022 | GROUPEMENT D'INTÉRÊT ÉCONOMIQUE DES GREFFES DE TRIBUNAUX DE COMMERCE DE FRANCECNIL imposed a fine of 250,000 EUR on GROUPEMENT D'INTÉRÊT ÉCONOMIQUE DES GREFFES DE TRIBUNAUX DE COMMERCE DE FRANCE. The record states that the sanction concerns a violation, but no further details are provided. | FR | CNIL | GDPR | €250,000 | ↗ |
| 13 Nov 2014 | GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD 20,000 EUR for continuing to send commercial emails after the user requested deletion of personal data and opted out of communications. The case indicates a failure to respect the data subject’s withdrawal of consent and request to stop marketing processing. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 01 Jan 2020 | GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD for sending unsolicited advertising emails. The conduct infringed the complainant's rights despite the complainant being listed on the Robinson list and the company having been previously sanctioned for similar conduct. | ES | AEPD | ePrivacy | €1,800 | ↗ |