BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 11 Aug 2022 | AMPLIFON Magyarország Kereskedelmi és Szolgáltató Korlátolt Felelősségű TársaságAMPLIFON Magyarország was fined by the NAIH 80,000,000 HUF for processing personal data for market research without proper notice to data subjects, without a specific and legitimate purpose, and without a valid legal basis. The authority found that the company’s conduct breached core GDPR principles. | HU | NAIH | GDPR | Ft 80,000,000 | ↗ |
| 11 Aug 2022 | Lakásszövetkezeti adatközlő lapon gyűjtött személyes adatokThe entity was fined for requiring housing cooperative members to provide unnecessary personal data and for giving inadequate information about data processing. The authority found violations of GDPR Articles 6 and 13. | HU | NAIH | GDPR | €508 | ↗ |
| 11 Aug 2022 | Lolland KommuneLolland Kommune was fined 50,000 DKK for failing to implement basic security measures. Employees were able to disable passwords on mobile devices, exposing sensitive citizen data to unauthorized access. | DK | Datatilsynet | GDPR | €6,721 | ↗ |
| 14 Aug 2022 | INVERTIA TENERIFE 2019, S.L.INVERTIA TENERIFE 2019, S.L. was fined 2,000 EUR by the AEPD for failing to inform data subjects about the processing of their personal data. The authority treated this as a breach of Article 13 GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 16 Aug 2022 | Fiziska personaA fine of EUR 200 was imposed. The decision has entered into force. | LV | DVI | GDPR | €200 | ↗ |
| 16 Aug 2022 | Dane anonimowe (N. Ośrodek Kultury z siedzibą w N. przy ul.)UODO imposed an administrative fine of PLN 2,500 on the Cultural Centre. The authority found that personal data were entrusted for processing without a written data processing agreement and without verifying whether the processor provided sufficient technical and organizational safeguards under the GDPR. | PL | UODO | GDPR | €531 | ↗ |
| 18 Aug 2022 | niegoThe Polish DPA (UODO) imposed an administrative fine of PLN 4,569 on an individual. The authority found a failure to cooperate with the President of UODO and a failure to provide access to information necessary for the performance of its duties. | PL | UODO | GDPR | €967 | ↗ |
| 19 Aug 2022 | Fidesz-Magyar Polgári SzövetségFidesz-Magyar Polgári Szövetség was fined by NAIH 300,000 HUF for unlawfully processing personal data, including phone numbers, without a legal basis. The authority also found violations of the rights to erasure and access, as well as inadequate information provided during phone campaigns. | HU | NAIH | GDPR | €735 | ↗ |
| 22 Aug 2022 | Enel Energie Muntenia S.A.The company was fined by ANSPDCP for failing to implement sufficient security measures. The breach concerned inadequate safeguards required to protect data. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 22 Aug 2022 | COMUNIDAD DE PROPIETARIOS ***COMUNIDAD.1The entity installed a video surveillance camera in a common area without proper signage. This breached Article 13 GDPR because individuals in the monitored area were not given the required information. | ES | AEPD | GDPR | €300 | ↗ |
| 23 Aug 2022 | Anonymisiert (DSB 2022-0.585.764)The responsible party unlawfully processed personal data by installing a hidden WiFi camera in a public restroom. This breached the GDPR principles of lawfulness, purpose limitation, and data minimization, and the data subjects were not informed. | AT | DSB | GDPR | €25,000 | ↗ |
| 23 Aug 2022 | Geanonimiseerd (APD 129/2022)The Litigation Chamber imposed a fine for insufficient technical and organizational measures to protect data security. This led to unauthorized access to personal documents. | BE | APD | GDPR | €2,500 | ↗ |
| 24 Aug 2022 | B.B.B.The entity installed a video surveillance camera covering common areas without authorization from the homeowners' association. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €600 | ↗ |
| 25 Aug 2022 | COMUNIDAD PROPIETARIOS R.R.R.The community of owners COMUNIDAD PROPIETARIOS R.R.R. was fined EUR 150 by the AEPD for installing a video surveillance system in the building entrance hall without proper data protection compliance. The authority found a breach of Article 13 GDPR concerning the duty to inform data subjects. | ES | AEPD | GDPR | €150 | ↗ |
| 25 Aug 2022 | B.B.B.A lawyer sent personal data without authorization via WhatsApp for professional promotion. The AEPD found a breach of GDPR Articles 6 and 5(1)(f) and imposed a fine of 4,000 EUR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 29 Aug 2022 | Alpha Bank România SAAlpha Bank România SA was fined EUR 1,000 by ANSPDCP for a data security breach. A document was mistakenly sent to the wrong recipient via WhatsApp. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 30 Aug 2022 | Dane anonimowe (T. Spółkę z ograniczoną odpowiedzialnością z siedzibą w W.)The President of UODO imposed an administrative fine of PLN 31,988 on T. Ltd. The authority found that the company failed to provide access to information necessary for the President of UODO to carry out his duties. | PL | UODO | GDPR | €6,759 | ↗ |
| 31 Aug 2022 | niegoThe President of UODO imposed a fine of PLN 6,854 on an individual for processing the complainant’s image through video surveillance. The breach consisted of failing to cooperate with the authority and not providing information necessary for it to perform its duties. | PL | UODO | GDPR | €1,450 | ↗ |
| 01 Sept 2022 | Liceo Statale "Edoardo Amaldi” di Alzano LombardoLiceo Statale “Edoardo Amaldi” was fined EUR 4,000 by the Garante for violations related to the processing of personal data, including sensitive data. The authority found that the processing lacked a proper legal basis and adequate safeguards. | IT | Garante | GDPR | €4,000 | ↗ |
| 01 Sept 2022 | B.B.B.The entity was fined for installing surveillance cameras that captured public areas without prior administrative authorization. This constituted a breach of data protection regulations. | ES | AEPD | GDPR | €300 | ↗ |