Order report
BULLETIN №081Last updated · 26 Jul 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
01 Jan 2018G.L. GISOFT ANÁLISIS Y DISEÑO, S.L.G.L. GISOFT ANÁLISIS Y DISEÑO, S.L. was fined 600 EUR by the AEPD. The case concerned the sending of unsolicited commercial emails, which breaches Article 21.1 of the LSSI.ESAEPDePrivacy€600↗
15 Jul 2013ENTABAN SERVICIOS, S.C.ENTABAN SERVICIOS, S.C. was fined by the AEPD EUR 600 for sending unsolicited commercial emails. The messages did not include a means for recipients to opt out, which breached Article 21.1 of the LSSI.ESAEPDePrivacy€600↗
02 Jul 2010DATACYL SERVICIOS INFORMÁTICOS, S.L.DATACYL SERVICIOS INFORMÁTICOS, S.L. was fined 600 EUR by the AEPD. The case concerned sending unsolicited commercial emails without recipient consent, in breach of Article 21 of the LSSI.ESAEPDePrivacy€600↗
02 Sept 2010ENDESA ENERGIA, S.A.ENDESA ENERGIA, S.A. was fined by the AEPD for sending unsolicited commercial emails despite the recipient’s request to stop receiving such messages. The conduct breached Article 21.1 of the LSSI on marketing communications without consent.ESAEPDePrivacy€600↗
28 Sept 2010WORKING MARESME S.L.WORKING MARESME S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which prohibits marketing communications without prior consent.ESAEPDePrivacy€600↗
30 Jun 2014ATRAPALO, S.L.ATRAPALO, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails to a user who had previously requested to unsubscribe. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€600↗
05 Jun 2023CHINA CENTER LLEIDACHINA CENTER LLEIDA was fined EUR 700 by the AEPD for failing to properly sign its video surveillance system and for not providing customers with required data protection information. The authority found a breach of Article 13 of the GDPR.ESAEPDGDPR€700↗
28 May 2026Croce Rossa Italiana – Comitato regionale Toscana – Presidio Anna TorrigianiThe Italian Data Protection Authority imposed a 700 EUR fine on Croce Rossa Italiana – Comitato regionale Toscana – Presidio Anna Torrigiani. The case concerned a data protection breach during a patient's hospitalization in the orthopedics department, including improper handling of information about HIV status.ITGaranteGDPR€700↗
17 Dec 2024ASOCIACIÓN ESCUELA NACIONAL DE EQUITACIÓNASOCIACIÓN ESCUELA NACIONAL DE EQUITACIÓN was fined EUR 750 by the AEPD for failing to comply with a data protection authority resolution. The case concerns Article 58(2) of the GDPR.ESAEPDGDPR€750↗
26 Oct 2021ЧСИ2The Commission fined the private bailiff ЧСИ2 for unlawfully processing personal data by accessing bank account information after the enforcement proceeding had ended. The authority found a breach of the purpose limitation principle under Article 5 GDPR.BGCPDPGDPR€383↗
30 May 2016UNION DISTRIBUIDORA DE EDICIONES DE ARAGON S.L.UNION DISTRIBUIDORA DE EDICIONES DE ARAGON S.L. was fined EUR 800 by the AEPD for sending unsolicited commercial emails. The authority found that the messages continued despite the recipient’s attempts to unsubscribe.ESAEPDePrivacy€800↗
26 Sept 2018VILAN DATAMINING SLVILAN DATAMINING SL was fined by the AEPD €800 for sending unsolicited commercial emails. The messages did not provide a way to exercise the rights of access, rectification, cancellation, or objection.ESAEPDePrivacy€800↗
10 Feb 2023SIA "SOAAR"SIA "SOAAR" was fined EUR 800 by the DVI. The decision entered into force on 10.02.2023.LVDVIGDPR€800↗
12 Mar 2026Almas SalonThe Garante imposed an EUR 800 fine on Almas Salon for operating a video surveillance system without proper compliance with data protection rules. The case concerns a breach of GDPR Article 5, indicating failure to meet core data processing principles.ITGaranteGDPR€800↗
30 Mar 2023XCOM DIGITAL LAB, S.L.XCOM DIGITAL LAB, S.L. was fined by the AEPD EUR 800 for sending unsolicited commercial emails. The company failed to comply with Article 21 of the LSSI despite repeated requests from the recipient to unsubscribe.ESAEPDePrivacy€800↗
01 Jan 2025B3C CONSULTORÍA DE SERVICIOS 2010 S.L.B3C CONSULTORÍA DE SERVICIOS 2010 S.L. was fined by the AEPD EUR 800 for subcontracting TELCO without authorization from the data controller, AIRE NETWORKS. The company also failed to impose the required contractual obligations on TELCO, breaching GDPR Articles 28.2 and 28.4.ESAEPDGDPR€800↗
29 Apr 2022C.P. ***COMUNIDAD.1The entity installed surveillance cameras without informing the property owners. It also failed to provide the required information on the surveillance signs.ESAEPDGDPR€800↗
20 May 2022SERVICIOS PROFESIONALES LA PARADA S.L.The entity installed a video surveillance system that recorded public areas without informing the affected individuals. This breached data protection rules and led to a fine imposed by the AEPD.ESAEPDGDPR€800↗
01 Jan 2016PROSAD CONSULTORES S.L.PROSAD CONSULTORES S.L. was fined by the AEPD EUR 800 for sending unsolicited commercial emails. The recipient had not given prior consent and was listed on the Robinson List, which breached Article 21.1 of the LSSI.ESAEPDePrivacy€800↗
24 Apr 2022SMART ELECTRIC SOLUTIONS, S.L.SMART ELECTRIC SOLUTIONS, S.L. was fined by the AEPD 800 EUR for installing a surveillance camera that captured public transit areas without proper warning signage. The authority found a breach of data minimization and the information duty under GDPR Articles 5(1)(c) and 13.ESAEPDGDPR€800↗