BULLETIN №083Last updated · 06 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -22.8%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 10 Jun 2020 | Istituto autonomo per le case popolari della provincia di IserniaIstituto autonomo per le case popolari della provincia di Isernia was fined EUR 2,000 by the Garante. The authority found that personal data, including health information, had been published on the institutional website without a proper legal basis. | IT | Garante | GDPR | €2,000 | ↗ |
| 08 Jun 2020 | Volt munkavállaló munkavégzési célú elektronikus leveleihez való hozzáféréseThe controller unlawfully denied access to the complainant's archived personal emails from 2018. It also failed to provide transparent information about the actions taken in response to the data subject's request. | HU | NAIH | GDPR | €582 | ↗ |
| 08 Jun 2020 | B.B.B.B.B.B. was fined by the AEPD 1,500 EUR for maintaining a video surveillance camera directed toward common areas without justified cause. The conduct caused anxiety to the complainant and was treated as a data protection breach. | ES | AEPD | GDPR | €1,500 | ↗ |
| 08 Jun 2020 | G.L.P. Instalaciones 86, S.L.G.L.P. Instalaciones 86, S.L. was fined by the AEPD EUR 60,000 for processing personal data without a legal basis. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 08 Jun 2020 | de heer YThe APD Litigation Chamber fined de heer Y 5,000 EUR. It found that personal data from the municipal staff list was processed for election propaganda, breaching the GDPR principles of purpose limitation and lawfulness. | BE | APD | GDPR | €5,000 | ↗ |
| 06 Jun 2020 | GLOBAL BUSINESS TRAVEL SPAIN S.L.U.An employee of GLOBAL BUSINESS TRAVEL SPAIN S.L.U. improperly accessed and disclosed an individual's health data. The AEPD found this to be a breach of the integrity and confidentiality principles under data protection law. | ES | AEPD | GDPR | €5,000 | ↗ |
| 05 Jun 2020 | EDP Energía, S.A.U.EDP Energía, S.A.U. was fined €50,000 by the AEPD for processing personal data without consent. The authority found this conduct to be in breach of Article 6(1) of the GDPR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 05 Jun 2020 | BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 05 Jun 2020 | FURNISHYOURSPACE SL.FURNISHYOURSPACE SL. was fined by the AEPD EUR 3,000 for failing to provide information or obtain consent regarding data storage and retrieval devices on its websites. The authority found a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 04 Jun 2020 | AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 04 Jun 2020 | PRA IBERIA, S.L.PRA IBERIA, S.L. was fined by the AEPD 60,000 EUR for unlawful processing of personal data and for failing to provide access to personal data information. The breaches concerned Articles 6(1) and 15 of the GDPR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 03 Jun 2020 | MALAGATROM, S.L.U.MALAGATROM, S.L.U. was fined by the AEPD 4,000 EUR for processing and disclosing personal data on Amazon without consent. The authority found this conduct to be contrary to Article 6 of the GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 03 Jun 2020 | Dane anonimowe (Panią A. T. prowadzącą działalność gospodarczą pod nazwą)UODO imposed a PLN 5,000 administrative fine on Dane anonimowe (Panią A. T. prowadzącą działalność gospodarczą pod nazwą). The case concerned a failure to provide information requested by the supervisory authority. | PL | UODO | GDPR | €1,133 | ↗ |
| 29 May 2020 | Dane anonimowe (R. Sp. z o.o. z siedzibą w D. przy ul.)UODO imposed a fine of PLN 15,000 on R. Sp. z o.o. The sanction concerned the failure to provide information required by the authority. | PL | UODO | GDPR | €3,371 | ↗ |
| 28 May 2020 | Azienda Teatro del GiglioAzienda Teatro del Giglio was fined 6,000 EUR by the Garante for breaching data protection principles. The authority found violations of lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €6,000 | ↗ |
| 21 May 2020 | TuslaThe Irish DPC imposed a fine of EUR 40,000 on Tusla in case IN-19-12-8. The fine was collected. | IE | DPC | GDPR | €40,000 | ↗ |
| 18 May 2020 | Digi Távközlési és Szolgáltató Kft.Digi Távközlési és Szolgáltató Kft. was fined by the NAIH 100,000,000 HUF for failing to delete a test database containing personal data after its intended use. The authority also found inadequate security measures, which led to unauthorized access to personal data. | HU | NAIH | GDPR | €283,000 | ↗ |
| 15 May 2020 | JobTeam A/SJobTeam A/S was reported to the police, and Datatilsynet recommended a fine of 50,000 DKK for breaching GDPR principles. The company deleted personal data after a data subject access request, which hindered the exercise of the individual's rights. | DK | Datatilsynet | GDPR | €6,705 | ↗ |
| 14 May 2020 | Geanonimiseerd (APD 25/2020)The APD Litigation Chamber imposed a EUR 50,000 fine on an anonymized social media platform for processing personal data without a valid legal basis. The case involved several GDPR breaches, including data processing principles and consent requirements. | BE | APD | GDPR | €50,000 | ↗ |
| 14 May 2020 | Anonymizováno (ÚOOÚ spr-563809-118)The entity was fined for operating a camera system without meeting the information obligations required under Czech data protection law. The case concerns a breach of transparency duties toward individuals subject to surveillance. | CZ | UOOU | GDPR | €145 | ↗ |