BULLETIN №081Last updated · 27 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 17 Nov 2022 | NUEVAS TECNOLOGIAS MEDITERRANEO, S.L.NUEVAS TECNOLOGIAS MEDITERRANEO, S.L. was fined by the AEPD EUR 800 for sending unsolicited advertising emails without prior consent. The case concerned a breach of Article 21 of the LSSI and unlawful direct marketing. | ES | AEPD | ePrivacy | €800 | ↗ |
| 01 Jan 2014 | INSTITUTO SUPERIOR DE EDUCACIÓN, ADMINISTRACIÓN Y DESARROLLO S.L.The entity sent unsolicited commercial emails without prior recipient consent. This breached Article 21.1 of the LSSI and resulted in an EUR 800 fine imposed by the AEPD. | ES | AEPD | ePrivacy | €800 | ↗ |
| 29 Sept 2022 | CITY OF SOUND 2010, S.L.CITY OF SOUND 2010, S.L. was fined EUR 800 by the AEPD for sending at least one commercial SMS to the complainant after the complainant had requested removal from the database. The authority found this to be a breach of Article 21 of the LSSI on unsolicited marketing communications. | ES | AEPD | ePrivacy | €800 | ↗ |
| 12 Jul 2022 | B.B.B.B.B.B. was fined by the AEPD EUR 800 for sending commercial emails without the recipient's consent. The authority found this breached Article 21 of the LSSI on unsolicited electronic communications. | ES | AEPD | ePrivacy | €800 | ↗ |
| 17 Mar 2022 | GRUPO TECNOPOLE FABRICACIÓN Y MONTAJES, S.L.The company was fined by the AEPD €800 for sending an unsolicited commercial email without the required consent. The breach concerned Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €800 | ↗ |
| 04 Aug 2022 | AUTOBIZ, S.A. SUCURSAL EN ESPAÑAAUTOBIZ, S.A. Sucursal en España was fined by the AEPD €800 for sending unsolicited marketing messages. The authority also found that the company failed to provide a functional opt-out mechanism, breaching Article 21 of the LSSI. | ES | AEPD | ePrivacy | €800 | ↗ |
| 12 Jul 2022 | PUNTO ROJO LIBROS, S.LPUNTO ROJO LIBROS, S.L was fined EUR 800 by the AEPD for sending commercial emails without the recipient’s consent. The conduct breached Article 21 of the LSSI, which requires prior consent for this type of communication. | ES | AEPD | ePrivacy | €800 | ↗ |
| 27 Jul 2023 | B.B.B.B.B.B. was fined EUR 800 by the AEPD for installing a surveillance system that captured images and sounds from a neighbor’s property and potentially the public street. The authority found breaches of GDPR Articles 13 and 6(1), citing the lack of a valid legal basis and proper notice to affected individuals. | ES | AEPD | GDPR | €800 | ↗ |
| 26 Mar 2026 | SOCIÉTÉ EXERÇANT UNE ACTIVITÉ D'ARTS DU SPECTACLE VIVANT (procédure simplifiée)CNIL imposed a fine of 850 EUR on SOCIÉTÉ EXERÇANT UNE ACTIVITÉ D'ARTS DU SPECTACLE VIVANT in connection with the liquidation of astreinte. The case concerns compliance with a prior obligation under a simplified procedure. | FR | CNIL | GDPR | €850 | ↗ |
| 04 Sept 2025 | A*** GmbHA*** GmbH did not report a personal data breach to the Austrian Data Protection Authority within the 72-hour deadline required by Article 33 GDPR. As a result, a fine of EUR 870 was imposed. | AT | DSB | GDPR | €870 | ↗ |
| 09 Jul 2025 | KAFFA KOFFEE ORGANISATION, S.L.KAFFA KOFFEE ORGANISATION, S.L. was fined EUR 900 by the AEPD for failing to implement appropriate technical and organizational measures. The deficiency led to email addresses being visible to multiple recipients, in breach of GDPR requirements. | ES | AEPD | GDPR | €900 | ↗ |
| 06 Mar 2025 | CUBILLO GALLEGO, S.L.CUBILLO GALLEGO, S.L. was fined by the AEPD in the amount of 900 EUR for failing to comply with data protection authority resolutions. The breach concerned the absence of required privacy information on the company website and in contracts. | ES | AEPD | GDPR | €900 | ↗ |
| 01 Jan 2023 | ISA MADRID SERVICIOS, S.L.ISA MADRID SERVICIOS, S.L. was fined EUR 900 by the AEPD for improperly positioning a surveillance camera that captured public areas. The authority also found that adequate signage informing individuals about the surveillance was not provided, in breach of data protection rules. | ES | AEPD | GDPR | €900 | ↗ |
| 07 Jan 2020 | CHENMING YE (BAZAR REAL)CHENMING YE (BAZAR REAL) was fined EUR 900 by the AEPD. The authority found that the required visible notice identifying the data controller was missing, which breached data protection rules. | ES | AEPD | GDPR | €900 | ↗ |
| 20 Oct 2022 | Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio CalabriaIstituto di Istruzione Superiore “G. Renda” was fined EUR 900 by the Garante for unlawfully processing personal data. The school published sensitive information about an employee’s contract termination without a legal basis, breaching GDPR principles of lawfulness, fairness, and transparency. | IT | Garante | GDPR | €900 | ↗ |
| 25 Jun 2024 | RIVENDELL TECHNOLOGY, S.L.RIVENDELL TECHNOLOGY, S.L. failed to properly handle a data subject access request, which constitutes a breach of Article 15 GDPR. The company was fined for not complying with the data protection authority's resolution. | ES | AEPD | GDPR | €900 | ↗ |
| 06 Mar 2025 | AVENTURA EN TRAMPOLINES S.L.AVENTURA EN TRAMPOLINES S.L. was fined 900 EUR by the AEPD for failing to comply with data protection authority resolutions. The case concerned Article 58(2) GDPR, which requires cooperation with the supervisory authority. | ES | AEPD | GDPR | €900 | ↗ |
| 01 Jan 2020 | ARGAN-LET, S.L.ARGAN-LET, S.L. was fined 900 EUR by the AEPD for sending unsolicited commercial SMS messages without prior consent. This conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €900 | ↗ |
| 03 Aug 2022 | LORENT 2013, S.L.LORENT 2013, S.L. was fined EUR 900 by the AEPD for operating video surveillance without proper signage. The cameras were also directed toward public areas without authorization, which breached data protection rules. | ES | AEPD | GDPR | €900 | ↗ |
| 17 Sept 2018 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined by the AEPD EUR 900 for sending unsolicited advertising emails to an individual who was not a customer. The case concerns a breach of data protection rules governing direct marketing communications. | ES | AEPD | ePrivacy | €900 | ↗ |