Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.6%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
26 Sept 2022HERON CITY VALENCIA MANAGEMENT S.L.HERON CITY VALENCIA MANAGEMENT S.L. was fined by the AEPD in the amount of 10,000 EUR for refusing to provide access to surveillance footage. This conduct breached the data subject’s rights, in particular the right of access under Article 15 of the GDPR.ESAEPDGDPR€10,000
26 Sept 2022TV2 Média Csoport Zrt.NAIH imposed a 10,000,000 HUF fine on TV2 Média Csoport Zrt. for insufficient user information and improper consent management on its websites. The authority found that these practices breached the principles of fair and transparent data processing.HUNAIHGDPR€24,500
26 Sept 2022ECOMM MOVADGENCY S.L.ECOMM MOVADGENCY S.L. was fined by the AEPD for sending commercial communications without the recipient’s consent. The company continued sending emails despite the recipient’s objection, which breached Article 21 GDPR.ESAEPDGDPR€1,000
27 Sept 2022Anonymised (HDPA 18/2022)A fine was imposed for sending unsolicited political communication via SMS without prior consent. The case concerns a breach of consent requirements for political and marketing communications.GRHDPAePrivacy€2,000
27 Sept 2022ALBERO FORTE COMPOSITE, S.L.The company used employees’ facial images for clocking in and out without proper notice about biometric data processing. AEPD found this to be a breach of data protection rules and imposed a 20,000 EUR fine.ESAEPDGDPR€20,000
29 Sept 2022CITY OF SOUND 2010, S.L.CITY OF SOUND 2010, S.L. was fined EUR 800 by the AEPD for sending at least one commercial SMS to the complainant after the complainant had requested removal from the database. The authority found this to be a breach of Article 21 of the LSSI on unsolicited marketing communications.ESAEPDePrivacy€800
29 Sept 2022SIA "Deprus"DVI imposed a fine of 500 EUR on SIA "Deprus". The decision is final and has entered into force.LVDVIGDPR€500
03 Oct 2022o persoana fizicăAn individual was fined 100 EUR for violating the General Data Protection Regulation. The case concerned a confirmed breach of obligations under the GDPR.ROANSPDCPGDPR€100
03 Oct 2022o persoana fizicăA fine of 50 EUR was imposed on an individual for violating a provision of the General Data Protection Regulation. The case was handled by ANSPDCP in Romania.ROANSPDCPGDPR€50
05 Oct 2022Dane anonimowe (D. sp. z o.o. sp. k. z siedzibą w P. przy ul.)The President of UODO imposed a fine of PLN 9,139 on the company. The sanction was issued because the company failed to comply with an order contained in an administrative decision of the data protection authority.PLUODOGDPR€1,907
06 Oct 2022Poste Italiane S.p.a.Poste Italiane S.p.a. was fined 10,000 EUR by the Garante. The authority found a breach of Article 15 GDPR due to failure to respond to a data access request.ITGaranteGDPR€10,000
06 Oct 2022Codess Sociale, Soc. Coop. socialeCodess Sociale, Soc. Coop. sociale was fined EUR 10,000 by the Garante. The authority found that the company failed to respond to a data subject's request to exercise GDPR rights.ITGaranteGDPR€10,000
06 Oct 2022Servizio Idrico Integrato S.c.p.a.Servizio Idrico Integrato S.c.p.a. was fined by the Garante EUR 15,000 for failing to implement adequate security measures to protect the personal data of users registered on its website. The case concerned insufficient safeguards for data processed online.ITGaranteGDPR€15,000
06 Oct 2022Associazione Rescue Drones Network ODVAssociazione Rescue Drones Network ODV was fined by the Garante in the amount of 3,000 EUR for failing to comply with data access requests. The authority treated this as a breach of GDPR Article 5.ITGaranteGDPR€3,000
06 Oct 2022Poste Italiane S.p.a.Poste Italiane S.p.a. was fined by the Garante in the amount of 10,000 EUR for failing to respond to a data access request. The authority found a breach of Article 15 of the GDPR.ITGaranteGDPR€10,000
06 Oct 2022Alpha Exploration Co. Inc.Alpha Exploration Co. Inc. was fined by the Garante EUR 2,000,000 for violations related to data processing practices on its social media platform, Clubhouse. The case concerned irregularities in the way user data was processed.ITGaranteGDPR€2,000,000
10 Oct 2022EKO ABEEThe fine was imposed for a violation of Article 15 GDPR because the controller failed to provide the data subject with access to their personal data. The case concerns non-compliance with the obligation to ensure the right of access within the required scope.GRHDPAGDPR€10,000
13 Oct 2022B.B.B.A tenant complained that the landlord installed a surveillance camera in the kitchen of the rented property without consent. The AEPD found a breach of data protection rules and imposed a EUR 4,000 fine.ESAEPDGDPR€4,000
14 Oct 2022VODAFONE ONO, S.A.U.The AEPD fined VODAFONE ONO, S.A.U. 50,000 EUR for consulting a credit information system without the individual's consent. The company had no contractual relationship with the person, so there was no valid basis for the inquiry.ESAEPDGDPR€50,000
17 Oct 2022SOCIETE DEVELOPPANT UN LOGICIEL DE RECONNAISSANCE FACIALECNIL imposed a EUR 20 million fine on SOCIETE DEVELOPPANT UN LOGICIEL DE RECONNAISSANCE FACIALE and issued an injunction subject to a penalty. The case concerned identified data protection breaches.FRCNILGDPR€20,000,000