BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2019 | COMERCIAL VIGOBRANDY, S.L.COMERCIAL VIGOBRANDY, S.L. was fined by the AEPD 1,500 EUR for installing a video surveillance camera without the required informational sign inside the premises. The case concerned a breach of data protection rules and the duty to properly inform individuals being recorded. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jul 2021 | A.A.A.The entity was fined by the AEPD 1,000 EUR for operating a video surveillance system without proper informational signage and customer information forms. The authority found this to be a breach of Article 13 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 18 May 2022 | EURO DONER KEBABEURO DONER KEBAB was fined by the AEPD EUR 300 for improperly directing a video surveillance camera toward a public space without justification. The authority also found that the required informational signage was missing. | ES | AEPD | GDPR | €300 | ↗ |
| 17 Jul 2015 | VUELING AIRLINES, S.A.VUELING AIRLINES, S.A. was fined by the AEPD 5,000 EUR for sending unsolicited commercial emails to a user who had previously unsubscribed. The authority found this breached article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 14 May 2010 | NEW CENTER SYSTEM, S.L.NEW CENTER SYSTEM, S.L. was fined by the AEPD 1,200 EUR for sending an unsolicited commercial email. The authority found that recipients were not given a simple and free way to object to the use of their data for advertising, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 17 Jun 2019 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined by the AEPD for incorrect processing of personal data. The error caused billing mistakes because one customer’s data was mixed with another subscriber’s information. | ES | AEPD | GDPR | €60,000 | ↗ |
| 09 Mar 2021 | NBQ TECHNOLOGY, S.A.U.NBQ TECHNOLOGY, S.A.U. was fined by the AEPD €20,000 for processing personal data without a legal basis. The case was related to identity theft in a microcredit contract. | ES | AEPD | GDPR | €20,000 | ↗ |
| 24 Jun 2021 | B.B.B.The entity was fined by the AEPD EUR 1,000 for installing a surveillance camera in a hair salon without informing individuals about the video surveillance area. The authority found this to be a breach of Article 13 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 30 Sept 2016 | UNITECO PROFESIONAL, CORREDURIA DE SEGUROS, S.L.UNITECO PROFESIONAL was fined EUR 1,000 by the AEPD for sending unsolicited commercial emails without providing recipients with an opt-out option. The authority found this to be a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jul 2020 | COMUNIDAD DE PROPIETARIOS R.R.R.COMUNIDAD DE PROPIETARIOS R.R.R. was fined by the AEPD for publishing a resident’s personal data on a community notice board. The conduct breached data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 May 2025 | ALBOR ENERGÍA S.L.ALBOR ENERGÍA S.L. was fined by the AEPD in the amount of 20,000 EUR for a data protection breach. The case concerned unauthorized subcontracting without informing the responsible party, as required by Article 28 of the GDPR. | ES | AEPD | GDPR | €20,000 | ↗ |
| 07 Feb 2022 | DESPACHO IBERFORO MADRID SLPDESPACHO IBERFORO MADRID SLP was fined EUR 1,000 by the AEPD for failing to comply with a decision concerning the right to erasure. The authority found a breach of Article 58(2) GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 29 Apr 2016 | CRUZ ROJA ESPAÑOLACRUZ ROJA ESPAÑOLA was fined by the AEPD EUR 1,100 for sending unsolicited commercial emails to a recipient who had previously requested data cancellation. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,100 | ↗ |
| 01 Jan 2022 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined by the AEPD 70,000 EUR for processing personal data without consent. The conduct led to unauthorized contracts and credit reporting issues. | ES | AEPD | GDPR | €70,000 | ↗ |
| 05 Feb 2020 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 75,000 by the AEPD for processing personal data without a legal basis. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €75,000 | ↗ |
| 02 Oct 2013 | ASOCIACION ESPAÑOLA DE ABOGADOS URBANISTASThe entity was fined by the AEPD €1,800 for sending unsolicited commercial emails without prior consent. This conduct breached Article 21.1 of the LSSI, which requires prior consent for such communications. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 29 May 2023 | B.B.B.The entity was fined by the AEPD for failing to remove a viral video from Twitter that breached data protection rules. The case indicates a lack of timely action in response to content processing personal data without a lawful basis. | ES | AEPD | GDPR | €2,000 | ↗ |
| 22 Jul 2019 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 50,000 EUR for sending an SMS to a third party with a link to a customer's purchase summary. This disclosed personal data without proper authorization. | ES | AEPD | GDPR | €50,000 | ↗ |
| 22 Feb 2023 | ENERGÍA COLECTIVA, S.L.ENERGÍA COLECTIVA, S.L. was fined by the AEPD 70,000 EUR for changing an individual's electricity provider without consent. The authority found a breach of Article 6 GDPR, which requires a lawful basis for processing personal data. | ES | AEPD | GDPR | €70,000 | ↗ |
| 23 Jun 2022 | B.B.B.The entity was fined EUR 300 by the AEPD for positioning surveillance cameras so that they captured public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |