Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
01 Jan 2019	VIAQUA XESTIÓN INTEGRAL DE AUGAS DE GALICIA, S.A.The company changed contract data without authorization, which constituted a breach of Article 6 of the GDPR. The AEPD imposed a fine of 60,000 EUR.	ES	AEPD	GDPR	€60,000	↗
14 Sept 2011	BONANZA DIGITAL SERVICES S.L.BONANZA DIGITAL SERVICES S.L. was fined by the AEPD €1,800 for sending unsolicited SMS messages with sexual content. The authority found this breached Article 21 of the LSSI on commercial communications sent without recipient consent.	ES	AEPD	ePrivacy	€1,800	↗
01 Mar 2017	CGPN, SARLCGPN, SARL was fined by the AEPD EUR 2,000 for sending unsolicited commercial emails without prior consent. This conduct breached Spanish data protection rules.	ES	AEPD	ePrivacy	€2,000	↗
01 Jan 2020	Caja Rural San José de Nules S. Cooperativa de Crédito de la Comunidad ValencianaCaja Rural San José de Nules was fined by the AEPD 5,000 EUR for publicly displaying individuals’ personal data on a notice board. The conduct breached data protection principles by exposing their economic status.	ES	AEPD	GDPR	€5,000	↗
06 Mar 2023	B.B.B.The entity was fined by the AEPD €5,000 for publishing radio amateurs’ personal data on a Telegram channel. The breach involved linking call signs to personal information, which violated data protection rules.	ES	AEPD	GDPR	€5,000	↗
11 Mar 2022	CINCON S.C.CINCON S.C. was fined EUR 500 by the AEPD for failing to provide adequate information about the retention period of personal data collected through a website form. The authority found a breach of Article 13 GDPR because data subjects were not given the required notice.	ES	AEPD	GDPR	€500	↗
01 Jan 2019	VODAFONE ESPAÑA, S.A.UVodafone España, S.A.U was fined by the AEPD in the amount of 2,500 EUR for sending unsolicited advertising messages to a business phone number without consent. The case concerned Article 21 of the LSSI, which governs marketing communications without prior recipient consent.	ES	AEPD	ePrivacy	€2,500	↗
23 Apr 2021	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 50,000 EUR for changing a customer's mobile line ownership without consent. The company also charged the customer's account amounts related to a third party's phone line.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2023	Vodafone España, S.A.U.The AEPD fined Vodafone España EUR 70,000 for providing a SIM card duplicate to a third party without the data subject's consent. This enabled unauthorized access to personal and banking information.	ES	AEPD	GDPR	€70,000	↗
30 Aug 2023	LORO PARQUE, S.A.LORO PARQUE, S.A. was fined by the AEPD 250,000 EUR for processing biometric data without a proper legal basis. The authority classified this as a very serious breach of Article 9 GDPR.	ES	AEPD	GDPR	€250,000	↗
23 Aug 2021	AD735 DATA MEDIA ADVERTISING S.L.AD735 DATA MEDIA ADVERTISING S.L. was fined EUR 15,000 by the AEPD for failing to comply with a resolution concerning the right of access. The authority cited a breach of Article 83(6) GDPR.	ES	AEPD	GDPR	€15,000	↗
02 Oct 2020	INSTITUTO DEL DAÑO CEREBRAL Y PSÍQUICO, S.L.The entity did not provide timely access to clinical records, which constituted a breach of data protection obligations. Deficiencies were also identified in the website's cookie policy, leading the AEPD to impose a fine.	ES	AEPD	ePrivacy	€3,000	↗
18 Apr 2023	B.B.B.A neighbor installed a surveillance camera aimed at the public street without authorization. The authority found this breached the data minimization principle under GDPR Article 5(1)(c).	ES	AEPD	GDPR	€300	↗
07 May 2024	PINKGREEN BARCELONA, S.L.PINKGREEN BARCELONA, S.L. was fined by the AEPD 4,000 EUR for disclosing personal data of individuals in responses to negative Google reviews. The authority found that the processing breached Articles 6 and 9 of the GDPR.	ES	AEPD	GDPR	€4,000	↗
22 Feb 2023	MUNDOVIAJES2010, S.L.MUNDOVIAJES2010, S.L. was fined by the AEPD in the amount of 7,000 EUR for processing personal data without consent. The authority also found a failure to provide the required information about data processing, in breach of GDPR Articles 6(1) and 14.	ES	AEPD	GDPR	€7,000	↗
09 Sept 2025	EVELB TÉCNICAS Y SISTEMAS, S.LEVELB TÉCNICAS Y SISTEMAS, S.L was fined by the AEPD 5,000 EUR for breaching Article 5(1)(f) GDPR. The case concerned inadequate data security measures that caused a temporary loss of data availability.	ES	AEPD	GDPR	€5,000	↗
24 Mar 2023	NATURGESTYGAS, S.L.NATURGESTYGAS, S.L. was fined EUR 10,000 by the AEPD for processing personal data without a legal basis. The company charged a customer despite having no contract or consent, which breached the legality requirement for processing.	ES	AEPD	GDPR	€10,000	↗
15 Mar 2024	LEADDESK, S.L.LEADDESK, S.L. was fined by the AEPD for failing to provide information requested by the data protection authority during an investigation. The conduct breached Article 58(1) GDPR and hindered supervisory oversight.	ES	AEPD	GDPR	€6,000	↗
31 Oct 2022	TECNO MOTOR LA MUELA, S.L.L.TECNO MOTOR LA MUELA, S.L.L. was fined by the AEPD €600 for installing surveillance cameras oriented toward public areas without prior administrative authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€600	↗
17 May 2011	LA CIGUEÑA DEL BEBE, S.L.LA CIGUEÑA DEL BEBE, S.L. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial emails without recipient consent. The case concerned Article 21.1 of the LSSI, which governs electronic marketing communications.	ES	AEPD	ePrivacy	€1,800	↗

Fine Tracker.