BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Apr 2021 | COMUNIDAD DE PROPIETARIOS R.R.R.The entity was fined by the AEPD EUR 1,500 for installing a video surveillance system without the required authorization from the homeowners' association. The case concerned a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 23 Apr 2021 | FRIGORIFICA BOTANA, S.L.FRIGORIFICA BOTANA, S.L. was fined by the AEPD EUR 4,000 for disproportionate audio/video recording in a meeting room without a justified cause or proper notice. The authority found this breached data protection principles. | ES | AEPD | GDPR | €4,000 | ↗ |
| 06 Feb 2023 | VODAFONE ESPAÑA, S.A.U.The AEPD imposed a 200,000 EUR fine on VODAFONE ESPAÑA, S.A.U. for breaching Article 6(1) GDPR. The case involved unauthorized SIM card duplication that enabled fraudulent bank charges. | ES | AEPD | GDPR | €200,000 | ↗ |
| 01 Jan 2013 | FASTFLY, INGENIEROS Y PROFESIONALES ESPECIALIZADOS J.J.G., S.L.FASTFLY was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 08 Jan 2024 | GESTIÓN DE PATRIMONIOS ANFIPOLIS SL.The entity sent unsolicited commercial emails to an individual registered on the Robinson List. This breached Article 21 of the LSSI and led to a fine imposed by the AEPD. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 09 Jun 2011 | GREEN TAL, S.A.GREEN TAL, S.A. was fined by the AEPD in the amount of EUR 1,200 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which restricts marketing communications without prior consent. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 12 Mar 2021 | PRODUCCIONES ROCKNROCK, S.L.PRODUCCIONES ROCKNROCK, S.L. was fined EUR 2,000 by the AEPD for failing to provide information or obtain consent for cookies on its website. The authority found a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 02 Jan 2024 | FEDERACIÓN DE SERVICIOS PÚBLICOS DE LA UGT (FSP-UGT)The entity sent emails that disclosed personal data of multiple recipients. The AEPD found a breach of the confidentiality principle under Article 5(1)(f) GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Apr 2022 | SOPHIE ET VOILA, S.L.SOPHIE ET VOILA, S.L. was fined EUR 10,000 by the AEPD for publishing a photo on Instagram without the data subject’s consent. The authority found a breach of Article 6 GDPR on lawful processing. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 Jan 2016 | DIRELEC GROUP S.L.DIRELEC GROUP S.L. was fined by the AEPD EUR 1,000 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI despite prior requests to stop contacting the recipient. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jan 2024 | FRESHLY COSMETICS, S.L.FRESHLY COSMETICS, S.L. was fined by the AEPD EUR 10,000 for using advertising cookies on its website without user consent. The authority found this breached Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2019 | IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONALIberia was fined by the AEPD 20,000 EUR for continuing to send emails to a customer who had requested removal from the loyalty program and deletion of personal data. The authority found this conduct to be a breach of GDPR Article 6. | ES | AEPD | GDPR | €20,000 | ↗ |
| 05 Apr 2024 | PALANCAMAR, S.L.PALANCAMAR, S.L. was fined EUR 5,000 by the AEPD for failing to inform a customer about the processing of their personal data during a vehicle purchase. The authority treated this as a breach of Article 13 GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |
| 04 Dec 2019 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 5,000 EUR by the AEPD for failing to provide requested information. The case concerned a breach of obligations under data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 30 Jun 2020 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 15,000 EUR for incorrectly listing a customer's ex-spouse as the account holder, even though the customer's data appeared on invoices. The company acknowledged responsibility and paid the reduced fine. | ES | AEPD | GDPR | €15,000 | ↗ |
| 09 Mar 2023 | INTERURBANA DE AUTOBUSES, S.A.INTERURBANA DE AUTOBUSES, S.A. was fined by the AEPD 70,000 EUR for publishing employees’ personal data without consent. The breach involved exposing unnecessary information on notice boards accessible to others, contrary to data minimization requirements. | ES | AEPD | GDPR | €70,000 | ↗ |
| 31 May 2012 | CITIBANK ESPAÑA, S.A.CITIBANK ESPAÑA, S.A. was fined by the AEPD EUR 30,001 for sending unsolicited commercial emails despite a prior request to be removed from its mailing list. The conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 25 Apr 2024 | ALL IN DIGITAL MARKETING, S.L.ALL IN DIGITAL MARKETING, S.L. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails without prior consent from recipients. The authority found this conduct to be in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 01 Jan 2012 | CENTRE DE REDISTRIBUCIO DE MERCADERIES, S.L.The entity was fined by the AEPD for sending unsolicited commercial emails without prior recipient consent. This conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €8,200 | ↗ |
| 04 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined by the Spanish data protection authority, AEPD, in the amount of 5,000 EUR. The sanction concerned obstruction of the authority’s inspection function, which breaches Article 58(1) GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |