Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
24 Jun 2020	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 75,000 EUR for continuing to send promotional SMS messages to an individual whose personal data had previously been deleted. The authority found this conduct to be in breach of Article 6 GDPR.	ES	AEPD	GDPR	€75,000	↗
03 May 2022	TITANIA COMPAÑÍA EDITORIAL, S.L.TITANIA COMPAÑÍA EDITORIAL, S.L. was fined by the AEPD 50,000 EUR for publishing an audio recording of a victim’s testimony in a high-profile court case. The authority found that the company processed personal data excessively and breached data protection principles.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2021	INMARÁN ASESORES, S.L.INMARÁN ASESORES, S.L. was fined 2,000 EUR by the AEPD for recording telephone conversations without informing the data subject or obtaining consent. The authority found this to be a breach of the GDPR information obligations.	ES	AEPD	GDPR	€2,000	↗
01 Jan 2024	EMPRENDEDORES ONLINE, LLCEMPRENDEDORES ONLINE, LLC was fined by the AEPD 10,000 EUR for recording and sharing course participants’ personal data without consent. The authority found a breach of GDPR Articles 5(1)(f) and 6(1), indicating unlawful processing and insufficient legal basis.	ES	AEPD	GDPR	€10,000	↗
31 Aug 2025	A.A.A.A.A.A. was fined by the AEPD EUR 3,000 for using surveillance cameras in a tourist accommodation without a valid legal basis and without informing the individuals concerned. The authority found a breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€3,000	↗
09 Sept 2022	B.B.B.A private individual was fined 600 EUR by the AEPD for using a webcam oriented toward a public street without prior authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€600	↗
15 Oct 2024	CARSO TRADING, S.L.CARSO TRADING, S.L. was fined by the AEPD in the amount of EUR 6,000 for failing to respond to a data access request. The authority found a breach of Article 15 of the GDPR and Article 58.2 of the GDPR.	ES	AEPD	GDPR	€6,000	↗
01 Jan 2019	EL PERIODICO DE CATALUNYA, S.L.EL PERIODICO DE CATALUNYA, S.L. was fined by the AEPD 10,000 EUR for sending a commercial email after a data deletion request. The authority found this conduct to be in breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€10,000	↗
01 Jan 2012	EL CORTE INGLES, S.A.EL CORTE INGLES, S.A. was fined EUR 1,800 by the AEPD for sending commercial emails without providing a proper means to exercise the right to object. The case concerned non-compliance with the LSSI rules on marketing communications.	ES	AEPD	ePrivacy	€1,800	↗
26 Sept 2022	B.B.B.B.B.B. was fined EUR 300 by the AEPD for failing to provide adequate information about a video surveillance system. The camera captured a public area without proper notice to affected individuals, breaching Article 13 GDPR.	ES	AEPD	GDPR	€300	↗
01 Jan 2023	PUNTO ROJO LIBROS, S.L.PUNTO ROJO LIBROS, S.L. was fined by the AEPD 1,000 EUR for failing to adequately respond to a data subject’s request for information about the origin of their personal data. The authority treated this as a breach of GDPR obligations.	ES	AEPD	GDPR	€1,000	↗
06 Aug 2025	GOHIPOTECA, S.L.GOHIPOTECA, S.L. processed personal data without consent, using an individual's data to apply for a mortgage without authorization. The AEPD imposed a fine of EUR 2,000 for this violation.	ES	AEPD	GDPR	€2,000	↗
01 Jan 2018	IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONALThe AEPD fined Iberia 5,700 EUR for sending unsolicited commercial emails to a complainant. The company had previously confirmed the cancellation of the complainant’s personal data, yet it continued marketing communications, breaching Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€5,700	↗
01 Dec 2017	BILUA E-COMMERCE S.L (CARETHY y BIUKY)BILUA E-COMMERCE S.L. was fined by the AEPD EUR 7,000 for sending unsolicited commercial emails. The messages were sent despite the recipient's request to unsubscribe, which breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€7,000	↗
16 Jul 2023	ALBEN AIRPORT FACILITIES S.L.ALBEN AIRPORT FACILITIES S.L. was fined 500 EUR by the AEPD for failing to provide access to information required under Article 58.1 of the GDPR. This obstructed the data protection authority’s supervisory and investigative functions.	ES	AEPD	GDPR	€500	↗
25 Nov 2024	XFERA CONSUMER FINANCE ESTABLECIMIENTO FINANCIERO DE CRÉDITO, S.A.The AEPD fined XFERA Consumer Finance 5,000 EUR for sending a customer unsolicited advertising SMS messages. The messages were sent after the customer had asked to stop receiving such communications, indicating a breach of marketing communication rules.	ES	AEPD	ePrivacy	€5,000	↗
02 Jun 2014	BONANZA DIGITAL SERVICES, S.L.BONANZA DIGITAL SERVICES, S.L. was fined by the AEPD EUR 30,001 for sending unsolicited advertising SMS messages without the recipient’s consent. The company also failed to provide an opt-out mechanism, breaching the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
12 Sept 2023	LEADDESK, S.L.LEADDESK, S.L. was fined by the AEPD for failing to provide access to information required under Article 58(1) of the GDPR. The conduct was treated as an obstruction of the data protection authority’s investigative functions.	ES	AEPD	GDPR	€4,000	↗
11 May 2022	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 70,000 by the AEPD for issuing a duplicate SIM card without the customer's consent. This enabled unauthorized access to the customer's bank account, indicating a serious failure in security and data protection controls.	ES	AEPD	GDPR	€70,000	↗
13 Feb 2015	LA QUINIELA INTELIGENTE S.L.LA QUINIELA INTELIGENTE S.L. was fined by the AEPD EUR 2,600 for sending unsolicited commercial emails. The authority found that the messages did not provide recipients with an effective way to object to further communications, breaching Article 21 of the LSSI.	ES	AEPD	ePrivacy	€2,600	↗

Fine Tracker.