BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 15 Nov 2025 | Państwowego Powiatowego Inspektora Sanitarnego w M., ul.UODO imposed a PLN 20,000 administrative fine on the State District Sanitary Inspector in M. The authority found that appropriate technical and organizational measures based on a risk assessment were not implemented, and that the effectiveness of safeguards for data processed on external media was not regularly tested. The case concerned a breach of the integrity and confidentiality principle. | PL | UODO | GDPR | €4,725 | ↗ |
| 14 Nov 2025 | UNIVERSIDADThe university was fined EUR 200,000 by the AEPD for processing special categories of personal data, including biometric data, without proper justification. The authority also found that a data protection impact assessment had not been carried out before implementing online exams. | ES | AEPD | GDPR | €200,000 | ↗ |
| 13 Nov 2025 | SOCIETE EXPLOITANT UN FONDS DE COMMERCE DE DISTRIBUTION A DOMINANTE ALIMENTAIRE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on the company. The case concerns a breach of rules under the data protection authority’s supervision. | FR | CNIL | GDPR | €20,000 | ↗ |
| 13 Nov 2025 | SOCIETE EXERCANT L'ACTIVITE DE "PORTAILS INTERNET" PERMETTANT D'ACCEDER AUX INFORMATIONS LEGALES ET FINANCIERES DES ENTREPRISES (procédure simplifiée)CNIL imposed an administrative fine of 5,000 EUR on SOCIETE EXERCANT L'ACTIVITE DE "PORTAILS INTERNET". The case was handled under a simplified procedure. | FR | CNIL | GDPR | €5,000 | ↗ |
| 13 Nov 2025 | Comune di OrteComune di Orte was fined EUR 6,000 by the Garante for installing surveillance cameras without ensuring the required transparency in data processing. The authority found breaches of the principles of lawfulness, fairness, and transparency. | IT | Garante | GDPR | €6,000 | ↗ |
| 13 Nov 2025 | GROUPEMENT D'INTERET ECONOMIQUE (GIE) EXERCANT UNE ACTIVITE D'ORGANISATION, DE DEVELOPPEMENT ET DE PROMOTION DE CENTRES COMMERCIAUX (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on a GIE engaged in the organization, development, and promotion of shopping centers. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 13 Nov 2025 | Maviglia Assicurazioni snc di Gherardo Maviglia & c.Maviglia Assicurazioni was fined by the Garante 10,000 EUR for unlawful processing of personal data. The case involved automatic email redirection and indefinite retention of email logs and content, which breached GDPR principles. | IT | Garante | GDPR | €10,000 | ↗ |
| 13 Nov 2025 | SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL CHAUSSURES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 5,000 on SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL CHAUSSURES under a simplified procedure. The decision is dated 13 November 2025. | FR | CNIL | GDPR | €5,000 | ↗ |
| 12 Nov 2025 | Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined by ANSPDCP in the amount of €3,000 for processing personal data in breach of GDPR. The case concerned unlawful handling of personal data by the company. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 12 Nov 2025 | Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined by ANSPDCP in the amount of €1,000 for processing personal data in violation of GDPR. The case concerned unlawful processing of personal data. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 10 Nov 2025 | Whitedecor SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in October 2025 at Whitedecor SRL and found violations of GDPR provisions. As a result, a fine of 1,000 EUR was imposed. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 07 Nov 2025 | MAJOREL SP SOLUTIONS, S.A.MAJOREL SP SOLUTIONS, S.A. was fined by the AEPD 80,000 EUR for processing personal data without a lawful basis. The authority found a breach of Article 6(1)(b) GDPR. | ES | AEPD | GDPR | €80,000 | ↗ |
| 07 Nov 2025 | Klass Wagen S.R.L.Klass Wagen S.R.L. was fined by ANSPDCP EUR 7,000 for failing to promptly report a personal data breach. The incident involved unauthorized access to its contract management system after a former employee disclosed credentials, affecting personal data of many individuals, including data subjects from other EU member states. | RO | ANSPDCP | GDPR | €7,000 | ↗ |
| 06 Nov 2025 | Lead Pronto LtdLead Pronto Ltd received an MPN and an EN from the ICO for sending unsolicited SMS messages promoting Government funded boiler grants. The case indicates a breach of direct marketing rules and consent requirements. | GB | ICO | GDPR | €34,065 | ↗ |
| 05 Nov 2025 | COFIDIS S.A., SUCURSAL EN ESPAÑACOFIDIS S.A., Sucursal en España was fined €5,000 by the AEPD for mixing a complainant’s personal data with unrelated information and sending a third party’s debt statement. The case concerns a breach of the data accuracy principle. | ES | AEPD | GDPR | €5,000 | ↗ |
| 05 Nov 2025 | RAMÓN GRAU, S.L.RAMÓN GRAU, S.L. was fined by the AEPD for installing a video surveillance system that recorded audio without informing employees. The authority found breaches of GDPR Articles 6(1) and 13 due to the lack of a valid legal basis and required transparency information. | ES | AEPD | GDPR | €30,000 | ↗ |
| 05 Nov 2025 | CABINET D'AVOCATS (procédure simplifiée)The CNIL imposed an administrative fine of EUR 5,000 on CABINET D'AVOCATS (procédure simplifiée). The case was handled under a simplified administrative procedure by the French data protection authority. | FR | CNIL | GDPR | €5,000 | ↗ |
| 04 Nov 2025 | COLLECTIVITE TERRITORIALE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 4,000 on COLLECTIVITE TERRITORIALE under a simplified procedure. The decision concerns a breach of data protection rules. | FR | CNIL | GDPR | €4,000 | ↗ |
| 04 Nov 2025 | THERE’S AN AI FOR THAT S.R.LTHERE’S AN AI FOR THAT S.R.L. was fined 30,000 RON by ANSPDCP. The sanction concerns a breach of the national ePrivacy law. | RO | ANSPDCP | ePrivacy | €5,898 | ↗ |
| 04 Nov 2025 | Fiziska personaA fine of EUR 150 was imposed by the DVI on an individual in Latvia. The decision is final and has entered into force. | LV | DVI | GDPR | €150 | ↗ |