Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
23 Aug 2022Geanonimiseerd (APD 129/2022)The Litigation Chamber imposed a fine for insufficient technical and organizational measures to protect data security. This led to unauthorized access to personal documents.BEAPDGDPR€2,500
20 Sept 2023DREAM HOUSE SISTEMAS DE DESCANSO, S.L.DREAM HOUSE SISTEMAS DE DESCANSO, S.L. was fined EUR 2,500 by the AEPD for sending unsolicited advertising SMS messages to a customer who had previously objected. The authority found this conduct breached Article 21 of the LSSI.ESAEPDePrivacy€2,500
01 Jan 2019LINEA DIRECTA ASEGURADORA, S.A.LINEA DIRECTA ASEGURADORA, S.A. was fined by the AEPD for sending unsolicited advertising emails without a prior relationship with the recipient. The authority found this breached Article 21 of the LSSI.ESAEPDePrivacy€2,500
07 Oct 2025Anonymisiert (DSB 2025-0.778.661)An individual unlawfully accessed and processed personal data from a secured hard drive without a legitimate purpose. The authority found this to be a breach of core GDPR principles, including lawfulness and purpose limitation.ATDSBGDPR€2,500
08 Jun 2017THE PHONE HOUSE SPAIN, S.L.U.THE PHONE HOUSE SPAIN, S.L.U. was fined by the AEPD 2,500 EUR for sending commercial text messages without providing recipients with a simple and free way to object to the processing of their data for promotional purposes. The case concerned non-compliance with the LSSI rules on marketing communications.ESAEPDePrivacy€2,500
27 Oct 2023Asociația de Proprietari bloc A1The homeowners association was fined by ANSPDCP for failing to implement measures ordered by the authority and for unlawfully disclosing owners’ names on maintenance lists without consent. The case concerns breaches of personal data protection rules and non-compliance with supervisory instructions.ROANSPDCPGDPR€501
21 Nov 2018Legea s.p.a.Legea s.p.a. was fined for processing personal data through forms on its website without providing the required information notice to data subjects. The case concerned a breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
30 Jul 2015Pastore srlPastore srl was fined by the Garante in the amount of 2,400 EUR for publishing an inadequate privacy notice on its website. The notice lacked several required elements under the Italian Data Protection Code.ITGaranteGDPR€2,400
03 Apr 2014Gianfranco SiriGianfranco Siri was fined by the Garante for operating a video surveillance system without providing the required minimum information notice. The case concerned a breach of privacy rules and the duty to inform individuals subject to surveillance.ITGaranteGDPR€2,400
08 Oct 2015Birrificio Torino srlBirrificio Torino srl was fined EUR 2,400 by the Garante for providing inadequate information in the data collection form on its website. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
11 Dec 2014Silvestri RobertoSilvestri Roberto was fined 2,400 EUR by the Garante. The case concerned inadequate information provided to data subjects through web forms on his website, in breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
21 Mar 2013Prima Armi S.r.l.Prima Armi S.r.l. was fined EUR 2,400 by the Garante for failing to provide adequate information about its video surveillance system. The authority found this to be a breach of data protection rules.ITGaranteGDPR€2,400
18 Sept 2014Europlan s.p.a.Europlan s.p.a. was fined by the Garante 2,400 EUR for processing personal data related to job applications without providing the required information notice. The case concerned the information duty under Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
17 Mar 2016Ghi Mar di Ghidetti Roberto & Callegari F.lli s.n.c.Ghi Mar di Ghidetti Roberto & Callegari F.lli s.n.c. was fined EUR 2,400 by the Garante. The authority found that the company collected personal data, including name and email, through its website without providing the required privacy notice, in breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
06 Oct 2016Infantino Auto S.r.l.ITGaranteGDPR€2,400
22 Jun 2016Aemme Car S.r.l.Aemme Car S.r.l. was fined by the Garante in the amount of 2,400 EUR for collecting personal data through its website without providing users with the required information notice. This conduct breached the Italian data protection code.ITGaranteGDPR€2,400
11 Dec 2014Ferreri Costruzioni s.r.l.Ferreri Costruzioni s.r.l. was fined EUR 2,400 by the Garante for failing to provide data subjects with the required information about data processing through web forms on its website. The conduct breached Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
12 Oct 2016AG Preziosi Banco Metalli s.r.l.AG Preziosi Banco Metalli s.r.l. was fined by the Garante for collecting personal data through a website contact form without providing the required privacy notice. This constituted a breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
06 Feb 2014Arianna ContuArianna Contu was fined by the Garante for operating a video surveillance system in her bar without the required notices informing people of the monitoring. The case concerned non-compliance with privacy law signage obligations.ITGaranteGDPR€2,400
12 Nov 2014Sergio FioreseSergio Fiorese was fined EUR 2,400 by the Garante for failing to provide data subjects with the required information about the processing of personal data. The breach concerned a video surveillance system at the association “Sottosopra”.ITGaranteGDPR€2,400