BULLETIN №083Last updated · 09 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 15 Feb 2023 | It's OK LimitedBetween 1 July 2019 and 1 June 2020, It's OK Limited made 1,752,149 unsolicited direct marketing calls to subscribers who had been registered with the TPS for at least 28 days. The company had no evidence that the recipients had not objected to receiving such calls, breaching regulation 21 of PECR. | GB | ICO | ePrivacy | €225,000 | ↗ |
| 16 Feb 2023 | CONCENTRA CENTRAL DE COMPRAS Y SERVICIOS S.L.The entity was fined for making misleading advertising calls without explicit consent from recipients. The authority cited breaches of GDPR Articles 14 and 21(4). | ES | AEPD | GDPR | €2,000 | ↗ |
| 16 Feb 2023 | BOX 24 2050 S.L.BOX 24 2050 S.L. was fined by the AEPD 2,000 EUR for making misleading advertising calls without prior explicit consent. The conduct breached data protection rules and the requirement for lawful processing. | ES | AEPD | GDPR | €2,000 | ↗ |
| 20 Feb 2023 | Mindenki Magyarországa MozgalomNAIH imposed a HUF 3,000,000 fine on Mindenki Magyarországa Mozgalom and Márki-Zay Péter for GDPR violations. The authority found inadequate data processing information and failure to respect the right to object in Facebook Messenger communications. | HU | NAIH | GDPR | €7,830 | ↗ |
| 20 Feb 2023 | B.B.B.B.B.B. installed a surveillance camera aimed at a private property without authorization. The AEPD found this to be a breach of Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 21 Feb 2023 | C.C.C.The entity was fined by the AEPD in the amount of EUR 300 for installing a video surveillance system that captured public areas. This conduct breached data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 22 Feb 2023 | MUNDOVIAJES2010, S.L.MUNDOVIAJES2010, S.L. was fined by the AEPD in the amount of 7,000 EUR for processing personal data without consent. The authority also found a failure to provide the required information about data processing, in breach of GDPR Articles 6(1) and 14. | ES | AEPD | GDPR | €7,000 | ↗ |
| 22 Feb 2023 | ENERGÍA COLECTIVA, S.L.ENERGÍA COLECTIVA, S.L. was fined by the AEPD 70,000 EUR for changing an individual's electricity provider without consent. The authority found a breach of Article 6 GDPR, which requires a lawful basis for processing personal data. | ES | AEPD | GDPR | €70,000 | ↗ |
| 22 Feb 2023 | B.B.B.The entity was fined by the AEPD 300 EUR for installing a surveillance camera that could capture images of a neighboring property without authorization. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 22 Feb 2023 | CONGREGACIÓN DEL SANTÍSIMO REDENTOR CURIA PROVINCIALThe entity was fined 500 EUR by the AEPD for installing a video surveillance system that could capture public areas without prior administrative authorization. The authority found this to be a breach of Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €500 | ↗ |
| 23 Feb 2023 | TECH TALENTS, S.L.TECH TALENTS, S.L. was fined EUR 2,000 by the AEPD for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which governs marketing communications sent without prior consent. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 23 Feb 2023 | Centric Health Ltd. (“Centric”)The Irish DPC imposed a fine of EUR 460,000 on Centric Health Ltd. in inquiry IN-21-2-4. The fine has been collected. | IE | DPC | GDPR | €460,000 | ↗ |
| 23 Feb 2023 | Ediscom S.p.A.Ediscom S.p.A. was fined by the Garante 300,000 EUR for lacking clarity and transparency when obtaining user consent for marketing purposes. The authority also found that data was processed despite objections from data subjects. | IT | Garante | GDPR | €300,000 | ↗ |
| 23 Feb 2023 | TársasházThe NAIH imposed a 200,000 HUF fine on Társasház for GDPR breaches linked to its electronic surveillance system. The authority found deficiencies in the processing purposes, legal basis, and information provided to data subjects. | HU | NAIH | GDPR | €524 | ↗ |
| 23 Feb 2023 | Okmánymásolás és fényképek készítése és közzététele munkahelyenThe authority imposed a fine for copying applicants’ identity documents and for failing to provide adequate information to data subjects during the recruitment process. The case concerned breaches of information duties and personal data processing rules in the workplace. | HU | NAIH | GDPR | €524 | ↗ |
| 27 Feb 2023 | B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing surveillance cameras that could capture images of a neighbor's property without authorization. The authority found this to be a breach of the data minimization principle under Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 27 Feb 2023 | Bank of Ireland 365 (‘BOI’)The Irish DPC fined Bank of Ireland 365 (‘BOI’) €750,000 in inquiry IN-20-7-2. The fine has been collected. | IE | DPC | GDPR | €750,000 | ↗ |
| 27 Feb 2023 | SIA “FitsyproA monetary fine of EUR 1,000 was imposed. The decision is final and has entered into force. | LV | DVI | GDPR | €1,000 | ↗ |
| 27 Feb 2023 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD for breaching Article 6(1) GDPR after a SIM card was duplicated without consent. The incident enabled unauthorized access to a customer's bank accounts, indicating serious failures in verification and data protection controls. | ES | AEPD | GDPR | €200,000 | ↗ |
| 27 Feb 2023 | Adatkezelési tájékoztatás átláthatóságaThe entity did not provide data subjects with transparent and accurate information about the purposes and legal bases of processing. This breached GDPR Articles 6, 12, and 13, and the authority imposed a fine of HUF 1,000,000. | HU | NAIH | GDPR | €2,630 | ↗ |