BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 29 Dec 2022 | SOCIETE DEVELOPPANT DES LOGICIELS DE GESTION ET LA COMMERCIALISATION DE LOGICIELS A DESTINATION DES COLLECTIVITES TERRITORIALES (procédure simplifiée)The CNIL imposed a fine of EUR 15,000 on SOCIETE DEVELOPPANT DES LOGICIELS DE GESTION ET LA COMMERCIALISATION DE LOGICIELS A DESTINATION DES COLLECTIVITES TERRITORIALES under a simplified procedure. The decision concerns a confirmed breach of rules supervised by the CNIL. | FR | CNIL | GDPR | €15,000 | ↗ |
| 29 Dec 2022 | SOCIETE DE DEVELOPPEMENT DE JEUX MOBILESCNIL imposed a fine of 3,000,000 EUR on SOCIETE DE DEVELOPPEMENT DE JEUX MOBILES. The decision concerns a breach of rules examined by the supervisory authority. | FR | CNIL | GDPR | €3,000,000 | ↗ |
| 29 Dec 2022 | SOCIETES EXPLOITANT UNE GAMME DE PLATEFORMES DE DISTRIBUTION DE CONTENUSCNIL imposed a fine of 5,000,000 EUR on SOCIETES EXPLOITANT UNE GAMME DE PLATEFORMES DE DISTRIBUTION DE CONTENUS. The case concerns a breach of rules supervised by CNIL. | FR | CNIL | GDPR | €5,000,000 | ↗ |
| 29 Dec 2022 | SOCIETE CREANT ET COMMERCIALISANT DES PRODUITS ELECTRONIQUES GRAND PUBLIC, DES ORDINATEURS PERSONNELS ET DES LOGICIELSCNIL imposed a fine of 8,000,000 EUR on SOCIETE CREANT ET COMMERCIALISANT DES PRODUITS ELECTRONIQUES GRAND PUBLIC, DES ORDINATEURS PERSONNELS ET DES LOGICIELS. The case concerned breaches of personal data protection rules. | FR | CNIL | GDPR | €8,000,000 | ↗ |
| 29 Dec 2022 | MEDECIN (procédure simplifiée)The CNIL imposed a EUR 5,000 fine on MEDECIN under a simplified procedure. The authority also issued an injunction subject to a penalty payment, indicating the need for prompt remediation. | FR | CNIL | GDPR | €5,000 | ↗ |
| 29 Dec 2022 | UNIVERSITE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on UNIVERSITE (procédure simplifiée). The record indicates a regulatory breach, but no further details are provided. | FR | CNIL | GDPR | €10,000 | ↗ |
| 30 Dec 2022 | SECURITAS DIREC ESPAÑA, S.A.SECURITAS DIREC ESPAÑA, S.A. was fined by the AEPD 50,000 EUR for failing to provide complete access to personal data logs linked to an alarm system. The case concerned an inadequate response to a data subject access request. | ES | AEPD | GDPR | €50,000 | ↗ |
| 30 Dec 2022 | A&G Couriers Limited T/A Fastway Couriers (Ireland)The Irish DPC fined A&G Couriers Limited T/A Fastway Couriers (Ireland) 15,000 EUR in inquiry IN-21-6-2. The penalty has been collected. | IE | DPC | GDPR | €15,000 | ↗ |
| 30 Dec 2022 | Dane anonimowe (K. S.A. z siedzibą w K. ul.)The President of UODO imposed an administrative fine of PLN 27,418 on the company. The sanction concerned failure to provide access to information necessary for the authority to perform its duties. | PL | UODO | GDPR | €5,858 | ↗ |
| 31 Dec 2022 | Meta Platforms Ireland Limited - encompassing two decisions for Facebook & Instagram servicesThe Irish DPC fined Meta Platforms Ireland Limited EUR 390,000,000 in two decisions concerning the Facebook and Instagram services. The case relates to inquiries IN-18-5-5 and IN-18-5-7, and the status is pending appeal. | IE | DPC | GDPR | €390,000,000 | ↗ |
| 01 Jan 2023 | THE RED KIWI, S.L.THE RED KIWI, S.L. was fined 30,000 EUR by the AEPD. The breach involved adding clients’ phone numbers to a WhatsApp group without consent, which enabled unauthorized access to personal data. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 Jan 2023 | PHONE HOUSEPHONE HOUSE was fined by the AEPD for failing to ensure data integrity and confidentiality. The breach resulted in a data incident caused by a cyberattack. | ES | AEPD | GDPR | €6,500,000 | ↗ |
| 01 Jan 2023 | Vodafone España, S.A.U.The AEPD fined Vodafone España EUR 70,000 for providing a SIM card duplicate to a third party without the data subject's consent. This enabled unauthorized access to personal and banking information. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2023 | MAKING SOLUTIONS, S.L. (MY PERFECT WEDDING)MY PERFECT WEDDING was fined by the AEPD EUR 1,000 for failing to properly provide personal data in response to the complainant’s request. The authority found a breach of Article 15 GDPR, which governs the right of access. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2023 | INSTITUTO OFTALMOLÓGICO DE ***LOCALIDAD.1 B.B.B., S.L.INSTITUTO OFTALMOLÓGICO DE ***LOCALIDAD.1 B.B.B., S.L. was fined by the AEPD EUR 7,000 for unlawfully disclosing personal data, including health information, in response to a Google review. The authority found a breach of confidentiality and of the security obligations under the GDPR. | ES | AEPD | GDPR | €7,000 | ↗ |
| 01 Jan 2023 | PUNTO ROJO LIBROS, S.L.PUNTO ROJO LIBROS, S.L. was fined by the AEPD 1,000 EUR for failing to adequately respond to a data subject’s request for information about the origin of their personal data. The authority treated this as a breach of GDPR obligations. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2023 | EL LEÓN DE EL ESPAÑOL PUBLICACIONES, S.A.EL ESPAÑOL was fined 10,000 EUR by the AEPD for publishing a private video without the consent of the data subject. The case concerns a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 Jan 2023 | SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. was fined by the AEPD 50,000 EUR for processing personal data without consent. The case involved formalizing an electricity supply contract and charging the complainant's bank account without authorization. | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2023 | ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.ATRESMEDIA was fined by the AEPD in the amount of 50,000 EUR for publishing excessive personal data. The case concerned an audio recording of a victim's court statement, which was not necessary for the journalistic purpose. | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2023 | Telefónica Móviles España, S.A.U.Telefónica Móviles España, S.A.U. was fined by the AEPD 70,000 EUR for processing personal data without a proper legal basis. The breach enabled unauthorized SIM card duplication and subsequent fraudulent bank transactions. | ES | AEPD | GDPR | €70,000 | ↗ |