BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 03 Jan 2023 | QUALITY-PROVIDER, S.A.QUALITY-PROVIDER, S.A. was fined by the AEPD in the amount of 30,000 EUR for processing personal data without consent. The data were then shared with third parties, who used them to contact the complainant via a personal social network. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 May 2025 | VERSON RIOJA, S.L.VERSON RIOJA, S.L. was fined by the AEPD for failing to provide access to personal data and the information requested by the data protection authority. The authority found a breach of Article 58.1 of the GDPR. | ES | AEPD | GDPR | €6,000 | ↗ |
| 23 Jun 2020 | B.B.B.B.B.B. was fined by the AEPD EUR 3,000 for improperly identifying an individual as the author of a traffic violation. The authority found that this conduct breached GDPR data protection principles. | ES | AEPD | GDPR | €3,000 | ↗ |
| 27 Feb 2023 | B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing surveillance cameras that could capture images of a neighbor's property without authorization. The authority found this to be a breach of the data minimization principle under Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 01 Jan 2015 | TEKOA CANAL TV S.L.TEKOA CANAL TV S.L. was fined EUR 39,000 by the AEPD for sending 29 commercial SMS messages without prior consent from recipients. The messages also did not include an opt-out option, in breach of the LSSI. | ES | AEPD | ePrivacy | €39,000 | ↗ |
| 09 Sept 2022 | COMUNIDAD PROPIETARIO R.R.R.The entity installed a video surveillance system without approval from the property owners' association. The authority found this to be a breach of data protection rules and imposed a fine of 1,500 EUR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 13 Oct 2025 | GLOBAL COAST INVESTMENTS, S.L.GLOBAL COAST INVESTMENTS, S.L. did not respond to a data access request. The AEPD found a breach of Article 15 GDPR and imposed a fine of 1,000 EUR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 05 Jun 2020 | BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 29 Nov 2019 | Vodafone España, S.A.U.Vodafone España, S.A.U. was fined EUR 75,000 by the AEPD for continuing to send communications to a complainant after a request for data deletion. The issue was caused by an IT error that left the complainant’s email address in the system. | ES | AEPD | GDPR | €75,000 | ↗ |
| 12 Nov 2019 | CONFEDERACION GENERAL DEL TRABAJOCONFEDERACION GENERAL DEL TRABAJO was fined by the AEPD €5,000 for disclosing the complainant’s personal data without consent. The disclosure included details of a verbal abuse and harassment case, family relations, pregnancy status, and home address, shared with about 400 union members. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2015 | LIWE ESPAÑOLA, S.A.LIWE ESPAÑOLA, S.A. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails despite the recipient’s attempts to unsubscribe. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 04 Nov 2015 | VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined by the AEPD €20,000 for sending unauthorized commercial communications to a user after they had unsubscribed from the newsletter. The case indicates a failure to respect consent and opt-out requirements for marketing communications. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 01 Jan 2016 | BANKINTER, S.A.BANKINTER, S.A. was fined by the AEPD 10,000 EUR for failing to provide the required cookie information and for not obtaining consent on its website. The case concerns breaches of notice and consent obligations for website cookies. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2014 | CTI WEB SERVICIOS INFORMATICOS S.L.CTI WEB SERVICIOS INFORMATICOS S.L. was fined by the AEPD in the amount of 3,000 EUR for sending unsolicited commercial emails. This conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 04 Jan 2021 | MACASVER S.L.MACASVER S.L. was fined €8,000 by the AEPD for incorrectly identifying the driver of a vehicle involved in a traffic violation. The authority found a breach of the GDPR data accuracy principle. | ES | AEPD | GDPR | €8,000 | ↗ |
| 26 May 2022 | PREICO JURIDICOS, S.L.PREICO JURIDICOS, S.L. was fined by the AEPD 3,000 EUR for failing to respond to information requests linked to a data breach investigation. The authority found a breach of Article 58(1) GDPR. | ES | AEPD | GDPR | €3,000 | ↗ |
| 24 May 2024 | B.B.B.B.B.B. was fined by the AEPD in the amount of 5,000 EUR for publishing personal data, including images and documents, on a public channel. The authority found a breach of the data minimization principle under GDPR Article 5(1)(c). | ES | AEPD | GDPR | €5,000 | ↗ |
| 10 Jan 2023 | POSADA DE LLERENA, S.L.POSADA DE LLERENA, S.L. was fined 2,000 EUR by the AEPD for requesting excessive personal data from customers, including copies of ID documents, as a condition for accommodation. The authority found this practice breached the GDPR data minimization principle. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2020 | PERSONAL MARK, S.L.PERSONAL MARK, S.L. was fined by the AEPD 10,000 EUR for failing to diligently delete personal data from its databases despite the complainant’s requests. The case indicates inadequate handling of data erasure obligations. | ES | AEPD | GDPR | €10,000 | ↗ |
| 11 Sept 2024 | KVIKU SPAIN, S.L.KVIKU SPAIN, S.L. was fined by the AEPD for failing to provide access to personal data and information requested by the data protection authority. The case concerned non-compliance with Article 58.1 of the GDPR. | ES | AEPD | GDPR | €1,200 | ↗ |