Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
09 Jan 2024EDITEUR DE SITE WEB - ANNUAIRE INVERSE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 1,500 on EDITEUR DE SITE WEB - ANNUAIRE INVERSE under a simplified procedure. The case concerns a breach of rules covered by the supervisory authority’s decision.FRCNILGDPR€1,500
31 Jan 2024EDITEUR DE SITE WEB - ACTUALITES DANS LE DOMAINE DES NOUVELLES TECHNOLOGIES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on EDITEUR DE SITE WEB - ACTUALITES DANS LE DOMAINE DES NOUVELLES TECHNOLOGIES under a simplified procedure. The case concerned a breach of personal data protection rules.FRCNILGDPR€20,000
23 Oct 2023EDITEUR DE BLOG EN LIGNE DEDIE A LA LUTTE CONTRE LA PEDOCRIMINALITE (procédure simplifiée)The CNIL imposed a fine of 2,000 EUR on EDITEUR DE BLOG EN LIGNE DEDIE A LA LUTTE CONTRE LA PEDOCRIMINALITE (procédure simplifiée). The matter was handled under a simplified procedure.FRCNILGDPR€2,000
16 May 2024EDITAURI S.L.EDITAURI S.L. was fined by the AEPD EUR 600 for not having a privacy policy on its online store. The authority found a breach of Article 13 GDPR because users were not provided with the required information about data processing.ESAEPDGDPR€600
15 Dec 2022Edison Energia S.p.A.Edison Energia S.p.A. was fined for running promotional campaigns to non-customers without adequate checks on data lists supplied by third parties. The authority found breaches of GDPR requirements on data processing and consent.ITGaranteGDPR€4,900,000
23 Feb 2023Ediscom S.p.A.Ediscom S.p.A. was fined by the Garante 300,000 EUR for lacking clarity and transparency when obtaining user consent for marketing purposes. The authority also found that data was processed despite objections from data subjects.ITGaranteGDPR€300,000
07 Feb 2013Edipro s.a.s.Edipro s.a.s. was fined by the Garante in the amount of EUR 100,000 for violations related to unsolicited telemarketing. The authority also cited the indiscriminate collection and communication of personal data.ITGaranteGDPR€100,000
07 Apr 2021EDICIONES TU REFORMA, S.L.EDICIONES TU REFORMA, S.L. was fined by the AEPD EUR 1,500 for sending unsolicited commercial SMS messages without the recipient's consent. This conduct breached Article 21 of the LSSI on commercial communications.ESAEPDePrivacy€1,500
25 Jul 2023EDICIONES PERIÓDICAS DEL NOROESTE, S.L.The entity published a private video on Twitter without the data subject’s consent. The authority found a breach of data minimization because excessive data were processed beyond what was necessary for the intended purpose.ESAEPDGDPR€10,000
27 Sept 2011EDICIONES FINDER, S.L.EDICIONES FINDER, S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails without recipient consent. The authority found a breach of Article 21 of the LSSI.ESAEPDePrivacy€600
09 Jul 2025EDICIONES CATÓLICOS Y VIDA PÚBLICA, S.L.U.The entity was fined for using non-essential cookies without obtaining prior user consent. This conduct breached the LSSI requirements on obtaining consent before activating such tracking tools.ESAEPDePrivacy€5,000
19 Feb 2025EDA TV CONSULTING, S.L.EDA TV CONSULTING, S.L. was fined by the AEPD EUR 2,000 for failing to comply with cookie policy requirements on its website. The breach concerned obligations under the LSSI.ESAEPDePrivacy€2,000
29 Jan 2025EDA TV CONSULTING, S.L.EDA TV CONSULTING, S.L. was fined by the AEPD 5,000 EUR for requiring a copy of the DNI when exercising data protection rights. The authority found this to breach the GDPR data minimization principle.ESAEPDGDPR€5,000
01 Jan 2024EDA TV CONSULTING S.L.EDA TV CONSULTING S.L. was fined 5,000 EUR by the AEPD for publishing a minor’s image without consent. The case concerns a breach of data protection rules and the child’s privacy rights.ESAEPDGDPR€5,000
29 Apr 2022ECOZONO Y CULTURA, S.L.ECOZONO Y CULTURA, S.L. collected personal data through surveys without a valid legal basis. The data were intended for later marketing contact with the individuals concerned. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€6,000
26 Sept 2022ECOMM MOVADGENCY S.L.ECOMM MOVADGENCY S.L. was fined by the AEPD for sending commercial communications without the recipient’s consent. The company continued sending emails despite the recipient’s objection, which breached Article 21 GDPR.ESAEPDGDPR€1,000
27 Jun 2023eCommerce 2020 ApSeCommerce 2020 ApS was fined by Persónuvernd in the amount of 7,500,000 ISK for registering loan defaults with Creditinfo Lánstrausti hf. without meeting the required conditions. The authority noted, among other issues, that claims below the minimum threshold were registered. The case concerns improper handling of debt-related personal data.ISPersónuverndGDPR€50,400
29 Nov 2012Eco Education s.r.l.Eco Education s.r.l. was fined by the Garante 10,400 EUR for sending promotional faxes without prior, specific, and informed consent from recipients. The authority found this to be a breach of data protection rules.ITGaranteGDPR€10,400
06 Aug 2014ECLIPSE COMUNICACION DIXITAL S.L.ECLIPSE COMUNICACION DIXITAL S.L. was fined by the AEPD in the amount of 6,000 EUR for sending unsolicited advertising emails. The company continued sending messages despite requests to be removed, which constitutes a breach of Article 21 of the LSSI.ESAEPDePrivacy€6,000
05 Jun 2014Ecaterina GypjasEcaterina Gypjas was fined by the Garante for failing to provide adequate simplified information about the use of a video surveillance system in her hotel. The authority found a breach of data protection rules.ITGaranteGDPR€2,400