BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2016 | KREDITECH SPAIN, S.L.KREDITECH SPAIN, S.L. was fined by the AEPD 5,000 EUR for continuing to send commercial emails to a complainant after the complainant exercised the right to data deletion. The authority found this conduct breached the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 18 Jun 2021 | STAROFSERVICE SASSTAROFSERVICE SAS was fined by the AEPD 3,000 EUR for sending advertising emails without the recipient's consent. This conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 16 Mar 2023 | PRODALVIN, S.L.PRODALVIN, S.L. was fined by the AEPD in the amount of 500 EUR for failing to properly inform individuals about the data controller and the address for exercising data subject rights in its video surveillance system. The authority found this to be a breach of Article 13 GDPR. | ES | AEPD | GDPR | €500 | ↗ |
| 01 Jan 2021 | B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for publishing personal data, including DNI/NIF, on a website. The authority found a breach of data minimization principles and GDPR requirements. | ES | AEPD | GDPR | €10,000 | ↗ |
| 28 Jun 2021 | ELEGA ENERGÍA, S.L.ELEGA ENERGÍA, S.L. was fined EUR 2,000 by the AEPD for failing to provide information about cookies and for not obtaining user consent before placing them. The authority found a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 07 Jun 2021 | CLUB NÁUTICO EL ESTACIOThe entity published personal data on its website without access restrictions. This breached confidentiality and data security principles. | ES | AEPD | GDPR | €3,000 | ↗ |
| 30 Dec 2022 | SECURITAS DIREC ESPAÑA, S.A.SECURITAS DIREC ESPAÑA, S.A. was fined by the AEPD 50,000 EUR for failing to provide complete access to personal data logs linked to an alarm system. The case concerned an inadequate response to a data subject access request. | ES | AEPD | GDPR | €50,000 | ↗ |
| 02 Aug 2021 | FUENSANTA S.L.FUENSANTA S.L. was fined by the AEPD in the amount of 3,000 EUR for failing to provide access to information under Article 58.1 of the GDPR. The case concerned non-compliance with information access obligations toward the supervisory authority. | ES | AEPD | GDPR | €3,000 | ↗ |
| 02 Mar 2023 | WILLOUGHBY COLLEGE, S.A.WILLOUGHBY COLLEGE, S.A. failed to provide requested information to the Spanish Data Protection Agency, which constituted a breach of Article 58.1 of the GDPR. A fine was imposed and reduced due to early payment and acknowledgment of responsibility. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2024 | CAIXABANK, S.A.CAIXABANK was fined by the AEPD for sending a privacy policy update to a non-client. The authority found that the stated legitimate-interest basis for processing did not have proper consent support. | ES | AEPD | GDPR | €200,000 | ↗ |
| 23 May 2018 | BELEADER INTERNET MARKETING S.L.BELEADER INTERNET MARKETING S.L. was fined 5,000 EUR by the AEPD. The authority found that the company sent unsolicited emails and did not honor unsubscribe requests. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 16 Feb 2022 | FEDERACION CASTELLANO-LEONESA DE SALVAMENTO Y SOCORRISMOThe organization was fined EUR 2,000 by the AEPD for requiring participants to consent to data processing and image rights transfers without any option to refuse. The authority found this incompatible with Article 6(1) GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 10 Mar 2021 | B.B.B.The entity was fined by the AEPD in the amount of 4,000 EUR for installing a video surveillance system aimed at public areas. The authority also found that images were captured without justified cause and retained longer than permitted by law. | ES | AEPD | GDPR | €4,000 | ↗ |
| 09 Jul 2025 | EDICIONES CATÓLICOS Y VIDA PÚBLICA, S.L.U.The entity was fined for using non-essential cookies without obtaining prior user consent. This conduct breached the LSSI requirements on obtaining consent before activating such tracking tools. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 29 Oct 2019 | JOKER PREMIUM INVEX, S.L.JOKER PREMIUM INVEX, S.L. was fined by the AEPD EUR 10,000 for sending unsolicited commercial communications. The company used personal data taken from public sources without the individuals’ consent. | ES | AEPD | GDPR | €10,000 | ↗ |
| 11 Jan 2024 | DESPACHO TORRENTE, S.L.P.DESPACHO TORRENTE, S.L.P. was fined by the AEPD 10,000 EUR for improperly disclosing personal data, including sensitive information, in a letter concerning damage at public facilities. The authority found a breach of data protection principles. | ES | AEPD | GDPR | €10,000 | ↗ |
| 07 Aug 2021 | SPORTIUM APUESTAS DIGITAL S.A.U.SPORTIUM APUESTAS DIGITAL S.A.U. was fined by the AEPD 5,000 EUR for sending marketing emails after a data deletion request and for having non-compliant cookie policies on its website. The case indicates failures in data protection and user consent controls. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 23 Apr 2021 | VODAFONE SERVICIOS, S.L.U.Vodafone Servicios, S.L.U. was fined by the AEPD 50,000 EUR for failing to verify a customer's identity. The lapse enabled identity fraud and the unauthorized creation of an account. | ES | AEPD | GDPR | €50,000 | ↗ |
| 14 Feb 2023 | MENZIES AVIATION SPAIN S.L.MENZIES AVIATION SPAIN S.L. was fined by the AEPD 2,000 EUR for sending emails to multiple recipients without using BCC. This exposed employees’ personal data to other recipients. | ES | AEPD | GDPR | €2,000 | ↗ |
| 31 Mar 2022 | ALQUILER SEGURO, S.A.U.ALQUILER SEGURO, S.A.U. accessed personal data from Asnef for purposes other than those intended. The AEPD found this to be a breach of data protection rules and imposed a 70,000 EUR fine. | ES | AEPD | GDPR | €70,000 | ↗ |