BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 28 Jan 2022 | SEAN SERIOS S.L.SEAN SERIOS S.L. was fined by the AEPD 12,000 EUR for publishing personal data of candidates from a selection process on its website without a legal basis. The authority found a breach of GDPR Article 6(1). | ES | AEPD | GDPR | €12,000 | ↗ |
| 01 Jan 2015 | MAKRO AUTOSERVICIO MAYORISTA, S.A.U.MAKRO AUTOSERVICIO MAYORISTA, S.A.U. was fined by the AEPD €5,000 for sending unsolicited commercial SMS messages. The authority found that no simple opt-out mechanism was provided, in breach of article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 29 Jun 2023 | FORKMERGE S.L.FORKMERGE S.L. was fined by the AEPD EUR 2,000 for failing to comply with a data subject’s request to remove personal data from search engine results. The authority found this to be a breach of Article 17 GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 03 Aug 2016 | WOLTERS KLUWER ESPAÑA, S.A.WOLTERS KLUWER ESPAÑA, S.A. was fined by the AEPD EUR 1,000 for sending unsolicited commercial emails to a complainant after confirming the cancellation of their data. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 18 Jan 2021 | INDUSTRIAS METÁLICAS ANRO, S.L.INDUSTRIAS METÁLICAS ANRO, S.L. was fined by the AEPD for failing to comply with cookie policy requirements on its website. The breach concerned Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 05 Jun 2020 | FURNISHYOURSPACE SL.FURNISHYOURSPACE SL. was fined by the AEPD EUR 3,000 for failing to provide information or obtain consent regarding data storage and retrieval devices on its websites. The authority found a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 31 Mar 2021 | ORANGE ESPAGNE, S.A.U.Orange Espagne, S.A.U. was fined by the AEPD 150,000 EUR for violations related to direct marketing communications. The case concerned conduct that may have breached data protection rules. | ES | AEPD | ePrivacy | €150,000 | ↗ |
| 23 Feb 2021 | SFAM ESPAÑA GENERAL S.L.SFAM ESPAÑA GENERAL S.L. was fined by the AEPD in the amount of 5,000 EUR. The case concerned unauthorized charges to a customer's bank account after a purchase, raised in a complaint about data misuse. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2012 | MAIL MARKETING SERVICIOS INFORMATICOS, S.LMAIL MARKETING SERVICIOS INFORMATICOS, S.L was fined by the AEPD in the amount of 7,000 EUR for sending unsolicited commercial emails. The case concerned a breach of Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €7,000 | ↗ |
| 06 Mar 2025 | CUBILLO GALLEGO, S.L.CUBILLO GALLEGO, S.L. was fined by the AEPD in the amount of 900 EUR for failing to comply with data protection authority resolutions. The breach concerned the absence of required privacy information on the company website and in contracts. | ES | AEPD | GDPR | €900 | ↗ |
| 24 Jul 2024 | CAMDEN TAPAS C.B.CAMDEN TAPAS C.B. was fined by the AEPD EUR 500 for installing a surveillance camera that captured public areas. The authority also noted the possible sharing of footage on Facebook, which breached data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 26 Aug 2021 | B.B.B.The entity was fined by the AEPD in the amount of EUR 1,500 for installing surveillance cameras that excessively recorded private areas of third parties. The authority found this to be a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |
| 04 Dec 2020 | BEINNOVA.ESBEINNOVA.ES was fined by the AEPD EUR 2,000 for sending unsolicited marketing emails without the recipient's consent. This conduct breached Article 21 of the LSSI on electronic commercial communications. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Jan 2023 | EL LEÓN DE EL ESPAÑOL PUBLICACIONES, S.A.EL ESPAÑOL was fined 10,000 EUR by the AEPD for publishing a private video without the consent of the data subject. The case concerns a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 03 Feb 2025 | IBERMUTUA, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL NUM.274IBERMUTUA was fined EUR 1,000,000 by the AEPD for a data breach. Due to a computer error, personal data, including health information, was mistakenly sent to various companies. | ES | AEPD | GDPR | €1,000,000 | ↗ |
| 18 Feb 2021 | INFORMÁTICA MÉDICA, S.L.INFORMÁTICA MÉDICA, S.L. was fined by the AEPD 60,000 EUR for failing to have a proper data processing agreement with its processor, OUTENUVE. The authority treated this as a breach of Article 28 GDPR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 03 Feb 2022 | DOOR2DOOR SPAIN, S.L.DOOR2DOOR SPAIN, S.L. did not comply with a decision of the Spanish Data Protection Agency (AEPD) requiring measures to inform individuals whose personal data were collected. The authority treated this as a breach of Article 58(2) GDPR and imposed a fine of EUR 1,000. | ES | AEPD | GDPR | €1,000 | ↗ |
| 14 Nov 2014 | TELEFÓNICA MÓVILES ESPAÑA S.A.U.TELEFÓNICA MÓVILES ESPAÑA S.A.U. was fined by the AEPD 1,000 EUR for sending unsolicited commercial SMS messages to a customer. The recipient had previously requested to opt out of such communications, but the messages continued. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jan 2023 | SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. was fined by the AEPD 50,000 EUR for processing personal data without consent. The case involved formalizing an electricity supply contract and charging the complainant's bank account without authorization. | ES | AEPD | GDPR | €50,000 | ↗ |
| 22 Feb 2021 | B.B.B.A fine was imposed for installing a surveillance camera aimed at public and private spaces without justification. The authority found a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |