Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
24 Mar 2023	NATURGESTYGAS, S.L.NATURGESTYGAS, S.L. was fined EUR 10,000 by the AEPD for processing personal data without a legal basis. The company charged a customer despite having no contract or consent, which breached the legality requirement for processing.	ES	AEPD	GDPR	€10,000	↗
15 Mar 2024	LEADDESK, S.L.LEADDESK, S.L. was fined by the AEPD for failing to provide information requested by the data protection authority during an investigation. The conduct breached Article 58(1) GDPR and hindered supervisory oversight.	ES	AEPD	GDPR	€6,000	↗
31 Oct 2022	TECNO MOTOR LA MUELA, S.L.L.TECNO MOTOR LA MUELA, S.L.L. was fined by the AEPD €600 for installing surveillance cameras oriented toward public areas without prior administrative authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€600	↗
17 May 2011	LA CIGUEÑA DEL BEBE, S.L.LA CIGUEÑA DEL BEBE, S.L. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial emails without recipient consent. The case concerned Article 21.1 of the LSSI, which governs electronic marketing communications.	ES	AEPD	ePrivacy	€1,800	↗
01 Jan 2015	OCIO MANAGEMENT S.L.OCIO MANAGEMENT S.L. was fined EUR 600 by the AEPD for sending unsolicited advertising messages via WhatsApp without consent. The authority also found that the company failed to provide the required data processing information on its website.	ES	AEPD	ePrivacy	€600	↗
23 Sept 2021	TELEFÓNICA MÓVILES ESPAÑA, S.A.U.TELEFÓNICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD EUR 1,000,000 for failing to adequately prevent unauthorized SIM card duplication. The breach enabled access to confidential information and caused financial losses for customers.	ES	AEPD	GDPR	€1,000,000	↗
21 May 2025	SILVANERGIA 2022, S.L.SILVANERGIA 2022, S.L. was fined by the AEPD EUR 5,000 for processing personal data without a legal basis, in breach of Article 6(1) GDPR. The case involved misleading a customer into confirming personal data over the phone.	ES	AEPD	GDPR	€5,000	↗
19 Feb 2024	DHL PARCEL IBERIA, S.L.U.DHL Parcel Iberia, S.L.U. was fined by the AEPD 5,000 EUR for failing to implement appropriate technical and organizational measures to ensure security appropriate to the risk, as required by Article 32 GDPR. As a result, personal data, including phone numbers, were exposed on shipping labels.	ES	AEPD	GDPR	€5,000	↗
22 Jun 2023	ASOCIACIÓN CANNÁBICA CLUB 26The entity installed surveillance cameras facing public spaces without prior administrative authorization. This may have infringed third-party rights and data protection rules.	ES	AEPD	GDPR	€500	↗
27 Mar 2014	ING DIRECT NV SUCURSAL EN ESPAÑAING Direct Spain was fined by the AEPD for sending commercial emails to a user after consent had been revoked. The authority found this to be a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
04 Oct 2021	LA ÚLTIMA HORA NOTICIAS, S.L.LA ÚLTIMA HORA NOTICIAS, S.L. was fined by the AEPD EUR 2,000 for installing cookies on users’ devices without prior consent. The authority also found that the website did not provide adequate information about the cookies used.	ES	AEPD	ePrivacy	€2,000	↗
12 Nov 2020	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD EUR 70,000 for continuing to send billing emails to a complainant despite an arbitration ruling. The ruling required the company to stop all services and delete the complainant’s data, which it failed to do.	ES	AEPD	GDPR	€70,000	↗
01 Jan 2016	CENTROS COMERCIALES CARREFOUR S.A.CENTROS COMERCIALES CARREFOUR S.A. was fined by the AEPD for sending unsolicited advertising emails. The authority also found that the company did not provide an easy opt-out mechanism, in breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€7,000	↗
12 Mar 2019	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 45,000 EUR by the AEPD for sending continuous SMS messages to a complainant despite a prior request to cancel personal data. The authority found this conduct to be a breach of data protection principles.	ES	AEPD	GDPR	€45,000	↗
03 Feb 2022	B.B.B.The entity was fined by the AEPD 600 EUR for operating a surveillance camera system that excessively recorded private and public areas. The authority found that this infringed personal and family privacy.	ES	AEPD	GDPR	€600	↗
20 Dec 2024	FUNDACIÓN SOCIEDAD CIENTÍFICA DE ONCOLOGÍA MÉDICAFUNDACIÓN SOCIEDAD CIENTÍFICA DE ONCOLOGÍA MÉDICA was fined 70,000 EUR by the AEPD for a data breach affecting confidentiality. The authority found a violation of Article 5(1)(f) GDPR, which requires personal data to be processed securely and confidentially.	ES	AEPD	GDPR	€70,000	↗
13 Jun 2025	GRUPO BONATEL SLGRUPO BONATEL SL was fined by the AEPD after an incident in which its database was encrypted and a ransom was demanded to prevent public disclosure. The authority found a breach of Article 5(1)(f) GDPR on integrity and confidentiality of personal data.	ES	AEPD	GDPR	€30,000	↗
28 May 2024	CUI ZSQ FOOD, S.L.CUI ZSQ FOOD, S.L. was fined by the AEPD 70,000 EUR for using a video surveillance system to intimidate employees. The company shared footage of an employee’s absence in a work chat, which breached data protection rules.	ES	AEPD	GDPR	€70,000	↗
10 Sept 2014	SAMPLE GESTION S.L.U.SAMPLE GESTION S.L.U. was fined by the AEPD in the amount of 1,100 EUR for sending unsolicited commercial SMS messages despite the recipient's request to opt out. This constituted a breach of Article 21.1 of the LSSI on unsolicited marketing communications.	ES	AEPD	ePrivacy	€1,100	↗
30 Mar 2021	TELEFÓNICA MÓVILES ESPAÑA, S.A.U.TELEFÓNICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD 75,000 EUR for using a customer's phone number without consent. This led to numerous unsolicited calls, despite prior claims that security measures had been implemented.	ES	AEPD	GDPR	€75,000	↗

Fine Tracker.