BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 13 Dec 2022 | Anonymisé (CNPD decision-18-fr-2022)The company unlawfully transmitted personal data to third parties without prior authorization. The authority also found breaches of GDPR data processing principles and data subject rights. | LU | CNPD | GDPR | €2,500 | ↗ |
| 13 Dec 2022 | Anonymisé (CNPD decision-20-fr-2022)The entity failed to meet GDPR transparency obligations, particularly by not providing information in a clear and accessible manner. CNPD imposed a fine of 4,200 EUR. | LU | CNPD | GDPR | €4,200 | ↗ |
| 13 Dec 2022 | CONSULTORÍA PERITACIONES ALMERIENSES, S.L.The company did not respond to a data access request and failed to publish information on data processing or the data controller on its website. AEPD treated this as a breach of the information obligations under Article 13 GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 13 Dec 2022 | Anonymisé (CNPD decision-21-fr-2022)The company was fined EUR 3,700 by the CNPD for breaching the transparency obligations under Article 12(1) of the GDPR. The authority found that information was not sufficiently accessible to users. | LU | CNPD | GDPR | €3,700 | ↗ |
| 13 Dec 2022 | Anonymisé (CNPD decision-19-fr-2022)The company failed to meet GDPR transparency obligations by not providing the required information in a concise, transparent, and easily accessible manner. CNPD imposed a fine of 1,000 EUR. | LU | CNPD | GDPR | €1,000 | ↗ |
| 13 Dec 2022 | Anonymisé (CNPD decision-22-fr-2022)The CNPD found that the entity breached GDPR transparency obligations by failing to provide information in a concise, transparent, and easily accessible manner. The infringement concerned Articles 12 and 13 of the GDPR. | LU | CNPD | GDPR | €1,700 | ↗ |
| 13 Dec 2022 | Anonymisé (CNPD decision-24-fr-2022)The entity failed to meet GDPR transparency obligations, particularly regarding the accessibility and comprehensibility of information provided to data subjects. CNPD imposed a fine of EUR 3,700. | LU | CNPD | GDPR | €3,700 | ↗ |
| 14 Dec 2022 | MÁRMOLES Y GRANITOS MEJIAS, S. L.The company was fined by the AEPD in the amount of 600 EUR for operating a video surveillance system without proper signage and required authorization. This may have infringed the rights of third parties and data protection rules. | ES | AEPD | GDPR | €600 | ↗ |
| 14 Dec 2022 | Monetise Media LimitedBetween 28 July 2020 and 28 July 2021, Monetise Media Limited sent 3,506,157 direct marketing emails and text messages. The recipients had not provided valid consent, which breached regulation 22 of PECR. | GB | ICO | ePrivacy | €145,000 | ↗ |
| 14 Dec 2022 | ODRIA COSTAS INTERNACIONAL, S.L.ODRIA COSTAS INTERNACIONAL, S.L. was fined EUR 10,000 by the AEPD for publishing images of minors without consent on a real estate website. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 15 Dec 2022 | Azienda Universitaria Friuli OccidentaleAzienda Universitaria Friuli Occidentale was fined EUR 55,000 by the Garante for processing personal data without a legal basis. The authority also found that the organization failed to provide required information about data deletion, in breach of the GDPR and national privacy rules. | IT | Garante | GDPR | €55,000 | ↗ |
| 15 Dec 2022 | Altroconsumo Edizioni S.r.lAltroconsumo Edizioni S.r.l was fined EUR 100,000 by the Garante for making unsolicited promotional calls without a proper legal basis. The authority also found that the company failed to provide adequate information and to obtain free and specific consent from data subjects. | IT | Garante | GDPR | €100,000 | ↗ |
| 15 Dec 2022 | Verizon Connect Italy S.p.A.Verizon Connect Italy S.p.A. was fined EUR 30,000 by the Garante for violations linked to the unauthorized installation of a geolocation device in a vehicle. The authority found that the processing of personal data breached GDPR requirements. | IT | Garante | GDPR | €30,000 | ↗ |
| 15 Dec 2022 | Edison Energia S.p.A.Edison Energia S.p.A. was fined for running promotional campaigns to non-customers without adequate checks on data lists supplied by third parties. The authority found breaches of GDPR requirements on data processing and consent. | IT | Garante | GDPR | €4,900,000 | ↗ |
| 15 Dec 2022 | Azienda Sanitaria provinciale di CataniaAzienda Sanitaria provinciale di Catania was fined 5,000 EUR by the Garante for unlawfully publishing personal data on its website concerning an employee's disciplinary and criminal proceedings. The authority found breaches of lawfulness, fairness, transparency, and data minimization principles. | IT | Garante | GDPR | €5,000 | ↗ |
| 15 Dec 2022 | Societatea Energetică Electrica S.A.In November 2022, ANSPDCP completed an investigation at Societatea Energetică Electrica S.A. and found a GDPR violation. The operator was fined 5,000 EUR and advised to take all necessary measures to comply with the rules. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 15 Dec 2022 | Comune di BraccianoComune di Bracciano was fined EUR 6,000 by the Garante for violations related to the processing of personal data. The case involved failures to comply with data protection principles and improper legal bases for processing. | IT | Garante | GDPR | €6,000 | ↗ |
| 15 Dec 2022 | Assiteca S.p.A.Assiteca S.p.A. was fined EUR 120,000 by the Garante for violations related to the processing of personal data for marketing purposes. The authority also found inadequate responses to data subject requests. The case highlights the need for proper handling of individual rights and GDPR-compliant marketing practices. | IT | Garante | GDPR | €120,000 | ↗ |
| 15 Dec 2022 | Giessegi Industria Mobili S.p.A.Giessegi Industria Mobili S.p.A. was fined by the Garante 50,000 EUR for unlawful processing of personal data. The company installed a device to track the geographical location of a vehicle used by an employee, in breach of GDPR requirements. | IT | Garante | GDPR | €50,000 | ↗ |
| 15 Dec 2022 | Azienda Universitaria Friuli CentraleAzienda Universitaria Friuli Centrale was fined EUR 55,000 by the Garante for processing personal data without a legal basis. The authority also found failures to provide instructions for data deletion and to stop unauthorized processing by Insiel spa. | IT | Garante | GDPR | €55,000 | ↗ |