Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
03 Jan 2023QUALITY-PROVIDER, S.A.QUALITY-PROVIDER, S.A. was fined by the AEPD in the amount of 30,000 EUR for processing personal data without consent. The data were then shared with third parties, who used them to contact the complainant via a personal social network.ESAEPDGDPR€30,000
01 May 2025VERSON RIOJA, S.L.VERSON RIOJA, S.L. was fined by the AEPD for failing to provide access to personal data and the information requested by the data protection authority. The authority found a breach of Article 58.1 of the GDPR.ESAEPDGDPR€6,000
23 Jun 2020B.B.B.B.B.B. was fined by the AEPD EUR 3,000 for improperly identifying an individual as the author of a traffic violation. The authority found that this conduct breached GDPR data protection principles.ESAEPDGDPR€3,000
27 Feb 2023B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing surveillance cameras that could capture images of a neighbor's property without authorization. The authority found this to be a breach of the data minimization principle under Article 5(1)(c) GDPR.ESAEPDGDPR€300
01 Jan 2015TEKOA CANAL TV S.L.TEKOA CANAL TV S.L. was fined EUR 39,000 by the AEPD for sending 29 commercial SMS messages without prior consent from recipients. The messages also did not include an opt-out option, in breach of the LSSI.ESAEPDePrivacy€39,000
09 Sept 2022COMUNIDAD PROPIETARIO R.R.R.The entity installed a video surveillance system without approval from the property owners' association. The authority found this to be a breach of data protection rules and imposed a fine of 1,500 EUR.ESAEPDGDPR€1,500
13 Oct 2025GLOBAL COAST INVESTMENTS, S.L.GLOBAL COAST INVESTMENTS, S.L. did not respond to a data access request. The AEPD found a breach of Article 15 GDPR and imposed a fine of 1,000 EUR.ESAEPDGDPR€1,000
05 Jun 2020BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules.ESAEPDePrivacy€1,500
29 Nov 2019Vodafone España, S.A.U.Vodafone España, S.A.U. was fined EUR 75,000 by the AEPD for continuing to send communications to a complainant after a request for data deletion. The issue was caused by an IT error that left the complainant’s email address in the system.ESAEPDGDPR€75,000
12 Nov 2019CONFEDERACION GENERAL DEL TRABAJOCONFEDERACION GENERAL DEL TRABAJO was fined by the AEPD €5,000 for disclosing the complainant’s personal data without consent. The disclosure included details of a verbal abuse and harassment case, family relations, pregnancy status, and home address, shared with about 400 union members.ESAEPDGDPR€5,000
01 Jan 2015LIWE ESPAÑOLA, S.A.LIWE ESPAÑOLA, S.A. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails despite the recipient’s attempts to unsubscribe. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€3,000
04 Nov 2015VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined by the AEPD €20,000 for sending unauthorized commercial communications to a user after they had unsubscribed from the newsletter. The case indicates a failure to respect consent and opt-out requirements for marketing communications.ESAEPDePrivacy€20,000
01 Jan 2016BANKINTER, S.A.BANKINTER, S.A. was fined by the AEPD 10,000 EUR for failing to provide the required cookie information and for not obtaining consent on its website. The case concerns breaches of notice and consent obligations for website cookies.ESAEPDePrivacy€10,000
01 Jan 2014CTI WEB SERVICIOS INFORMATICOS S.L.CTI WEB SERVICIOS INFORMATICOS S.L. was fined by the AEPD in the amount of 3,000 EUR for sending unsolicited commercial emails. This conduct breached Article 21.1 of the LSSI.ESAEPDePrivacy€3,000
04 Jan 2021MACASVER S.L.MACASVER S.L. was fined €8,000 by the AEPD for incorrectly identifying the driver of a vehicle involved in a traffic violation. The authority found a breach of the GDPR data accuracy principle.ESAEPDGDPR€8,000
26 May 2022PREICO JURIDICOS, S.L.PREICO JURIDICOS, S.L. was fined by the AEPD 3,000 EUR for failing to respond to information requests linked to a data breach investigation. The authority found a breach of Article 58(1) GDPR.ESAEPDGDPR€3,000
24 May 2024B.B.B.B.B.B. was fined by the AEPD in the amount of 5,000 EUR for publishing personal data, including images and documents, on a public channel. The authority found a breach of the data minimization principle under GDPR Article 5(1)(c).ESAEPDGDPR€5,000
10 Jan 2023POSADA DE LLERENA, S.L.POSADA DE LLERENA, S.L. was fined 2,000 EUR by the AEPD for requesting excessive personal data from customers, including copies of ID documents, as a condition for accommodation. The authority found this practice breached the GDPR data minimization principle.ESAEPDGDPR€2,000
01 Jan 2020PERSONAL MARK, S.L.PERSONAL MARK, S.L. was fined by the AEPD 10,000 EUR for failing to diligently delete personal data from its databases despite the complainant’s requests. The case indicates inadequate handling of data erasure obligations.ESAEPDGDPR€10,000
11 Sept 2024KVIKU SPAIN, S.L.KVIKU SPAIN, S.L. was fined by the AEPD for failing to provide access to personal data and information requested by the data protection authority. The case concerned non-compliance with Article 58.1 of the GDPR.ESAEPDGDPR€1,200