BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 08 Dec 2025 | SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 08 Dec 2025 | Dane anonimowe (S.)The UODO imposed an administrative fine of PLN 14,816 on Anonymous data (S.). The penalty was issued for failing to provide access to all personal data and information necessary for the President of the UODO to perform his duties. | PL | UODO | GDPR | €3,502 | ↗ |
| 08 Dec 2025 | Compania de Apă Oltenia S.A.The company was fined EUR 1,000 by ANSPDCP after an employee disclosed personal data on a social network. The case was initiated following a complaint from the data subject. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 08 Dec 2025 | Anonimizirano (IP-RS 0609-112/2025/7)A legal entity was fined 4,800 EUR by IP-RS for failing to provide concise, transparent, and understandable information to individuals when collecting personal data through online forms. The authority found this to be a breach of Article 13 GDPR. | SI | IP-RS | GDPR | €4,800 | ↗ |
| 05 Dec 2025 | XThe European Commission imposed a EUR 120 million fine on X for breaching transparency requirements under the Digital Services Act. The penalty covered deceptive verification design, an inadequate ad repository, and restricted access for researchers. | EU | European Commission | DSA | €120,000,000 | ↗ |
| 04 Dec 2025 | DIARIO DE PRENSA DIGITAL, S.L.DIARIO DE PRENSA DIGITAL, S.L. was fined by the AEPD 5,000 EUR for placing tracking and advertising cookies on its website without prior user consent. The authority found this to be a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 04 Dec 2025 | PARTI POLITIQUE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 5,000 on PARTI POLITIQUE under a simplified procedure and issued an injunction. The case concerns a breach of rules supervised by the CNIL. | FR | CNIL | GDPR | €5,000 | ↗ |
| 04 Dec 2025 | Istituto Comprensivo Centro di Casalecchio di RenoThe Garante fined Istituto Comprensivo Centro di Casalecchio di Reno EUR 2,000 for publishing personal data online without a proper legal basis. The authority found breaches of data minimization and transparency principles. | IT | Garante | GDPR | €2,000 | ↗ |
| 04 Dec 2025 | Comune di TuscaniaThe Garante fined Comune di Tuscania 12,000 EUR for failing to provide timely and complete responses to information requests. It also found breaches of lawfulness, fairness, and transparency, as well as inadequate data protection impact assessments for video surveillance. | IT | Garante | GDPR | €12,000 | ↗ |
| 04 Dec 2025 | Liceo scientifico e linguistico statale “Principe Umberto di Savoia”Liceo scientifico e linguistico statale “Principe Umberto di Savoia” was fined EUR 1,000 by the Garante for breaching the principles of lawfulness, fairness, and transparency in data processing. The authority also found that the school failed to provide adequate information to data subjects. | IT | Garante | GDPR | €1,000 | ↗ |
| 04 Dec 2025 | Istituto Comprensivo di Roverbella (Mantova)Istituto Comprensivo di Roverbella was fined EUR 1,000 by the Garante for breaches of data protection rules. The authority cited non-compliance with the principles of lawfulness, fairness, and transparency in data processing. | IT | Garante | GDPR | €1,000 | ↗ |
| 04 Dec 2025 | SOCIETE EXERCANT UNE ACTIVITE D'HOTELLERIE ET D'HEBERGEMENT (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on SOCIETE EXERCANT UNE ACTIVITE D'HOTELLERIE ET D'HEBERGEMENT. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €10,000 | ↗ |
| 03 Dec 2025 | AVATEL TELECOM, S.A.AVATEL TELECOM, S.A. was fined 500,000 EUR by the AEPD for unauthorized duplication of SIM cards and their fraudulent use. The case concerns breaches of data protection principles and controls over access to telecommunications services. | ES | AEPD | GDPR | €500,000 | ↗ |
| 03 Dec 2025 | FUNDACIÓN TRILEMAFUNDACIÓN TRILEMA was fined 3,000 EUR by the AEPD for publishing a minor’s image on social media without parental consent. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €3,000 | ↗ |
| 02 Dec 2025 | Bende IstvánBende István and Berencsi Béla Miklós were fined for processing personal data without a legal basis and for failing to provide required information. The authority found breaches of GDPR principles of fair processing, purpose limitation, and transparency. | HU | NAIH | GDPR | €1,315 | ↗ |
| 01 Dec 2025 | Anonimizirano (IP-RS 0609-128/2025/6)A legal entity was fined by IP-RS for failing to implement appropriate technical and organizational measures to secure personal data processing. This failure led to unauthorized access to data stored on a company laptop. | SI | IP-RS | GDPR | €1,000 | ↗ |
| 27 Nov 2025 | InfobelThe Belgian Data Protection Authority (APD) imposed a EUR 40,000 fine on Infobel on 2025-11-27. The authority found that the company resold telecom-derived personal data for marketing purposes without valid consent and ordered it to inform its business customers of the decision. | BE | Autorité de protection des données (APD) | GDPR | €40,000 | ↗ |
| 27 Nov 2025 | PFA Nițu A. Cleopatra – Expert contabilThe National Supervisory Authority for Personal Data Processing fined PFA Nițu A. Cleopatra – Expert contabil EUR 2,000 for GDPR violations. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 27 Nov 2025 | SOCIETE DE VENTE A DISTANCECNIL imposed an administrative fine of EUR 500,000 on SOCIETE DE VENTE A DISTANCE and issued an injunction. The case concerns a breach of rules supervised by CNIL. | FR | CNIL | GDPR | €500,000 | ↗ |
| 27 Nov 2025 | AMERICAN EXPRESS CARTE FRANCEOn 27 November 2025, CNIL fined AMERICAN EXPRESS CARTE FRANCE EUR 1.5 million for breaches of cookie and tracker rules. The authority found that trackers were placed without consent, despite refusal, and continued to be read after consent was withdrawn. | FR | CNIL | GDPR | €1,500,000 | ↗ |