BULLETIN №083Last updated · 07 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 03 Nov 2020 | CANARYCLICK CONSULTING SLCANARYCLICK CONSULTING SL was fined EUR 8,000 by the AEPD for improper management of its cookie policy on its websites. The authority also found that user consent was collected in a generic manner, in breach of data protection rules. | ES | AEPD | GDPR | €8,000 | ↗ |
| 01 Jan 2012 | NIGHTBONUS, S.L.NIGHTBONUS, S.L. was fined by the AEPD EUR 1,200 for sending marketing emails without prior recipient consent. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 16 Jun 2020 | REAL SPORTING DE GIJÓN, S.A.D.REAL SPORTING DE GIJÓN, S.A.D. was fined EUR 5,000 by the AEPD for breaching GDPR Article 7 on consent requirements. The case arose from a complaint by the Ministry of Finance concerning advertising practices. | ES | AEPD | GDPR | €5,000 | ↗ |
| 15 Apr 2024 | BANCO BILBAO VIZCAYA ARGENTARIA, S.A.Banco Bilbao Vizcaya Argentaria, S.A. was fined by the AEPD for including personal data in a credit solvency file without proper prior notice. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €200,000 | ↗ |
| 01 Jan 2016 | PROSAD CONSULTORES, S.L.PROSAD CONSULTORES, S.L. was fined by the AEPD 600 EUR for sending unsolicited commercial emails without prior consent. This conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 01 Jan 2016 | SYNERTEC GROUP, S.L.SYNERTEC GROUP, S.L. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited commercial emails. The recipient was registered on the Robinson List, and the conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2016 | FERIA MUESTRARIO INTERNACIONAL DE VALENCIAThe entity collected personal data from children under 14 without providing the required information or obtaining parental consent. The AEPD found this to be a breach of data protection rules. | ES | AEPD | ePrivacy | €8,000 | ↗ |
| 01 Jan 2024 | ALLIANZ COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.ALLIANZ COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. was fined by the AEPD EUR 140,000 for unauthorized access to personal data. The authority found a breach of GDPR confidentiality and security principles. | ES | AEPD | GDPR | €140,000 | ↗ |
| 03 Jan 2023 | QUALITY-PROVIDER, S.A.QUALITY-PROVIDER, S.A. was fined by the AEPD in the amount of 30,000 EUR for processing personal data without consent. The data were then shared with third parties, who used them to contact the complainant via a personal social network. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 May 2025 | VERSON RIOJA, S.L.VERSON RIOJA, S.L. was fined by the AEPD for failing to provide access to personal data and the information requested by the data protection authority. The authority found a breach of Article 58.1 of the GDPR. | ES | AEPD | GDPR | €6,000 | ↗ |
| 23 Jun 2020 | B.B.B.B.B.B. was fined by the AEPD EUR 3,000 for improperly identifying an individual as the author of a traffic violation. The authority found that this conduct breached GDPR data protection principles. | ES | AEPD | GDPR | €3,000 | ↗ |
| 27 Feb 2023 | B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for installing surveillance cameras that could capture images of a neighbor's property without authorization. The authority found this to be a breach of the data minimization principle under Article 5(1)(c) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 01 Jan 2015 | TEKOA CANAL TV S.L.TEKOA CANAL TV S.L. was fined EUR 39,000 by the AEPD for sending 29 commercial SMS messages without prior consent from recipients. The messages also did not include an opt-out option, in breach of the LSSI. | ES | AEPD | ePrivacy | €39,000 | ↗ |
| 09 Sept 2022 | COMUNIDAD PROPIETARIO R.R.R.The entity installed a video surveillance system without approval from the property owners' association. The authority found this to be a breach of data protection rules and imposed a fine of 1,500 EUR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 13 Oct 2025 | GLOBAL COAST INVESTMENTS, S.L.GLOBAL COAST INVESTMENTS, S.L. did not respond to a data access request. The AEPD found a breach of Article 15 GDPR and imposed a fine of 1,000 EUR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 05 Jun 2020 | BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 29 Nov 2019 | Vodafone España, S.A.U.Vodafone España, S.A.U. was fined EUR 75,000 by the AEPD for continuing to send communications to a complainant after a request for data deletion. The issue was caused by an IT error that left the complainant’s email address in the system. | ES | AEPD | GDPR | €75,000 | ↗ |
| 12 Nov 2019 | CONFEDERACION GENERAL DEL TRABAJOCONFEDERACION GENERAL DEL TRABAJO was fined by the AEPD €5,000 for disclosing the complainant’s personal data without consent. The disclosure included details of a verbal abuse and harassment case, family relations, pregnancy status, and home address, shared with about 400 union members. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2015 | LIWE ESPAÑOLA, S.A.LIWE ESPAÑOLA, S.A. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails despite the recipient’s attempts to unsubscribe. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 04 Nov 2015 | VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined by the AEPD €20,000 for sending unauthorized commercial communications to a user after they had unsubscribed from the newsletter. The case indicates a failure to respect consent and opt-out requirements for marketing communications. | ES | AEPD | ePrivacy | €20,000 | ↗ |