BULLETIN №083Last updated · 06 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -22.8%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 13 Feb 2020 | Comune di Urago d'OglioComune di Urago d'Oglio was fined EUR 4,000 by the Garante for improper processing and online publication of special-category personal data, including health data. The authority found insufficient legal basis and inadequate transparency toward the data subjects. | IT | Garante | GDPR | €4,000 | ↗ |
| 12 Feb 2020 | AEMA HISPANICA, S.L.AEMA HISPANICA, S.L. was fined by the AEPD 6,000 EUR for sending one employee's payroll to another employee. The incident constituted a breach of data protection rules. | ES | AEPD | GDPR | €6,000 | ↗ |
| 11 Feb 2020 | AMALFI SERVICIOS DE RESTAURACIÓN S.L.AMALFI SERVICIOS DE RESTAURACIÓN S.L. was fined by the AEPD 6,000 EUR for installing surveillance cameras without proper consent. The authority also found that the cameras captured images of public spaces without sufficient justification, breaching data protection rules. | ES | AEPD | GDPR | €6,000 | ↗ |
| 11 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 5,000 by the Spanish Data Protection Agency (AEPD) for failing to provide requested information. The conduct breached Article 58(1) of the GDPR and hindered the authority’s supervisory powers. | ES | AEPD | GDPR | €5,000 | ↗ |
| 10 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined by the AEPD for processing personal data without valid consent. The case concerned a debt claim made against an individual for a contract they had not entered into. | ES | AEPD | GDPR | €60,000 | ↗ |
| 07 Feb 2020 | SOLO EMBRAGUE, S.L.SOLO EMBRAGUE, S.L. was fined by the AEPD 3,000 EUR for failing to provide information about its privacy policy and for not obtaining consent for cookies on its website. The case concerns breaches of transparency obligations and consent requirements under data protection rules. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 06 Feb 2020 | R.T.I. - Reti Televisive Italiane s.p.a.R.T.I. - Reti Televisive Italiane s.p.a. was fined EUR 20,000 by the Garante for broadcasting a segment on “Le Iene”. The segment made the complainant identifiable through her voice and personal information, breaching data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 06 Feb 2020 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 70,000 EUR by the AEPD for a personal data breach. An error in assigning identification numbers allowed one customer to access another customer's personal data. | ES | AEPD | GDPR | €70,000 | ↗ |
| 06 Feb 2020 | Liceo Artistico Statale di NapoliLiceo Artistico Statale di Napoli was fined EUR 4,000 by the Garante for publishing an outdated teacher ranking on its institutional website. The authority found this breached GDPR principles of lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €4,000 | ↗ |
| 06 Feb 2020 | Azienda Unità Sanitaria Locale Toscana CentroAzienda Unità Sanitaria Locale Toscana Centro was fined by the Garante 10,000 EUR for violations related to data processing in the health sector. The case concerned the handling of patient data without full compliance with GDPR requirements. | IT | Garante | GDPR | €10,000 | ↗ |
| 05 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 75,000 by the AEPD for processing personal data without a legal basis. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €75,000 | ↗ |
| 05 Feb 2020 | TELEFONICA MÓVILES ESPAÑA, S.A.U.TELEFONICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD 30,000 EUR for failing to comply with a resolution concerning the GDPR right of access. The case indicates non-implementation of an obligation set out in a prior supervisory authority decision. | ES | AEPD | GDPR | €30,000 | ↗ |
| 04 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined by the Spanish data protection authority, AEPD, in the amount of 5,000 EUR. The sanction concerned obstruction of the authority’s inspection function, which breaches Article 58(1) GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |
| 04 Feb 2020 | VODAFONE ESPAÑA, S.A.U.The AEPD imposed a 50,000 EUR fine on VODAFONE ESPAÑA, S.A.U. for sending an SMS indicating a contract using incorrect personal data. The authority found a breach of Article 6 GDPR concerning the lawful basis for processing. | ES | AEPD | GDPR | €50,000 | ↗ |
| 04 Feb 2020 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined 75,000 EUR by the AEPD for processing personal data without consent. The case concerned unauthorized portability of a phone line. | ES | AEPD | GDPR | €75,000 | ↗ |
| 04 Feb 2020 | VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 60,000 EUR for a data protection violation. The case involved unauthorized data processing and signature forgery by an employee, which led to a fraudulent service transfer. | ES | AEPD | GDPR | €60,000 | ↗ |
| 04 Feb 2020 | BAZAR SUSANABAZAR SUSANA was fined EUR 4,000 by the AEPD for improperly obtaining and disseminating personal images from a video surveillance system. The case concerns a breach of data protection rules and the unlawful processing of CCTV footage. | ES | AEPD | GDPR | €4,000 | ↗ |
| 30 Jan 2020 | Liceo Nobel di Torre del GrecoLiceo Nobel di Torre del Greco was fined EUR 4,000 by the Garante for publishing a teacher ranking list on its website. The conduct breached GDPR principles of lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €4,000 | ↗ |
| 30 Jan 2020 | Comune di ColledaraComune di Colledara was fined EUR 4,000 by the Garante for publishing personal data in the provisional ranking of a competition on its institutional website. The authority found breaches of lawfulness, fairness, transparency, and data minimization. | IT | Garante | GDPR | €4,000 | ↗ |
| 29 Jan 2020 | B.B.B.The AEPD fined B.B.B. EUR 2,000 for using a phone number for a purpose other than the one for which it was originally collected. The authority found this to be a breach of the GDPR principle of purpose limitation. | ES | AEPD | GDPR | €2,000 | ↗ |