Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
06 Aug 2025	SERVICIOS FINANCIEROS CARREFOUR, E.F.C., S.ASERVICIOS FINANCIEROS CARREFOUR, E.F.C., S.A suffered a data breach involving unauthorized access to and exfiltration of customer personal data, including payment information. The incident was linked to phishing and account compromise, resulting in the loss of sensitive data.	ES	AEPD	GDPR	€2,500,000	↗
01 Jan 2015	DIVINITEL, S.L.DIVINITEL, S.L. was fined by the AEPD EUR 2,000 for sending unsolicited commercial messages without recipient consent. This constituted a breach of Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€2,000	↗
24 Apr 2023	B.B.B.B.B.B. published the complainant’s image and name on its website without consent. AEPD found this to be a breach of data protection rules and imposed a EUR 1,000 fine.	ES	AEPD	GDPR	€1,000	↗
24 May 2013	RIZOS S.L.RIZOS S.L. was fined by the AEPD EUR 1,800 for sending commercial messages without providing information on how to opt out. This breached Article 21.2 of the LSSI, which requires a clear unsubscribe option for recipients.	ES	AEPD	ePrivacy	€1,800	↗
23 Jan 2024	CAJA RURAL DE EXTREMADURA S.C.C.CAJA RURAL DE EXTREMADURA S.C.C. was fined by the AEPD 250,000 EUR for a breach that compromised the confidentiality and integrity of personal data. The authority found a violation of Article 5(1)(f) of the GDPR.	ES	AEPD	GDPR	€250,000	↗
24 Mar 2021	ALLIANZ COMPAÑIA DE SEGUROS Y REASEGUROS, S.A.ALLIANZ COMPAÑIA DE SEGUROS Y REASEGUROS, S.A. was fined EUR 30,000 by the AEPD. The authority found that after a policy was canceled, the company continued processing personal data without a lawful basis, in breach of Article 6 GDPR.	ES	AEPD	GDPR	€30,000	↗
28 Jan 2022	IBERCAJA BANCO, S.A.IBERCAJA BANCO, S.A. was fined by the AEPD EUR 100,000 for unlawfully processing personal data linked to a family inheritance matter. The breach included opening a bank account for a minor without consent and disclosing personal data to third parties without authorization.	ES	AEPD	GDPR	€100,000	↗
14 Aug 2025	ALIQUAM SOFTWARE DEVELOPMENT, S.R.L.UALIQUAM SOFTWARE DEVELOPMENT, S.R.L.U was fined by the AEPD 1,400 EUR for sending unsolicited marketing emails despite requests to stop. The case concerns a breach of the LSSI rules on commercial communications.	ES	AEPD	ePrivacy	€1,400	↗
24 Feb 2021	UNIÓN FINANCIERA ASTURIANA S.A. E.F.C.UNIÓN FINANCIERA ASTURIANA S.A. E.F.C. was fined by the AEPD 15,000 EUR for consulting personal data in the Asnef file without a contractual relationship. The authority found this breached GDPR Article 6.1.	ES	AEPD	GDPR	€15,000	↗
04 Dec 2019	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 5,000 EUR for failing to provide the requested information. The case concerned a breach of obligations under data protection rules.	ES	AEPD	GDPR	€5,000	↗
11 Jul 2012	SOLUCIONES CORPORATIVAS IP, S.L.U.SOLUCIONES CORPORATIVAS IP, S.L.U. was fined 600 EUR by the AEPD for sending an unsolicited email. The conduct breached Article 21 of the LSSI, which restricts commercial communications without prior consent.	ES	AEPD	ePrivacy	€600	↗
01 Jan 2024	MAKING SOLUTIONS, S.L. (MY PERFECT WEDDING)MAKING SOLUTIONS, S.L. (MY PERFECT WEDDING) was fined 1,000 EUR by the AEPD. The authority found a breach of Article 15 GDPR for failing to provide an individual with access to their personal data.	ES	AEPD	GDPR	€1,000	↗
29 Feb 2024	WATIUM S.L.WATIUM S.L. was fined by the Spanish Data Protection Agency (AEPD) in the amount of EUR 160,000. The case concerned the failure to provide the required information, which constitutes a breach of Article 58.1 of the GDPR.	ES	AEPD	GDPR	€160,000	↗
20 Jan 2023	DELSA ALQUILERES, S.L.DELSA ALQUILERES, S.L. installed a surveillance camera covering common areas without a valid legal basis and without adequate informational signage. The AEPD found this to breach GDPR Articles 6 and 13.	ES	AEPD	GDPR	€1,000	↗
06 May 2019	ENDESA ENERGÍA XXI, S.L.U.ENDESA ENERGÍA XXI, S.L.U. was fined by the AEPD 100,000 EUR for a data protection breach. An agent mistakenly altered a contract, replacing the complainant’s data with that of a third party.	ES	AEPD	GDPR	€100,000	↗
15 Feb 2022	EMPRESA.1The company was fined EUR 300 by the AEPD for improperly orienting surveillance cameras toward public spaces without prior authorization. The conduct breached data protection rules.	ES	AEPD	GDPR	€300	↗
03 Dec 2024	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 20,000 EUR for sending commercial electronic communications to a customer who had opted out. The authority also found that there was no effective mechanism to revoke consent.	ES	AEPD	ePrivacy	€20,000	↗
19 Feb 2020	CITRICOS Y FRUTALES DEL SURESTE, S.L.CITRICOS Y FRUTALES DEL SURESTE, S.L. was fined by the AEPD 3,000 EUR for installing video surveillance in common areas without approval from the property owners' association and without obtaining explicit consent from affected individuals. The authority found breaches of GDPR Articles 5(1)(c) and 13.	ES	AEPD	GDPR	€3,000	↗
03 Jun 2020	MALAGATROM, S.L.U.MALAGATROM, S.L.U. was fined by the AEPD 4,000 EUR for processing and disclosing personal data on Amazon without consent. The authority found this conduct to be contrary to Article 6 of the GDPR.	ES	AEPD	GDPR	€4,000	↗
17 Mar 2025	FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHAThe Federation published a voter list on its website, disclosing members’ personal data without consent. The authority found that adequate security measures were not in place to protect the data.	ES	AEPD	GDPR	€1,000	↗

Fine Tracker.