Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.6%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
30 Oct 2015CLASE EJECUTIVA, S.L.CLASE EJECUTIVA, S.L. was fined by the AEPD EUR 400 for sending commercial emails without prior consent from recipients. The authority found this conduct breached Article 21.1 of the LSSI.ESAEPDePrivacy€400
10 Jul 2020COMUNIDAD.1The entity was fined for installing surveillance cameras with audio in common areas without proper notice to affected persons. The authority found this to be a breach of data protection rules.ESAEPDGDPR€1,000
16 May 2012CONFORAMA ESPAÑA S.A.CONFORAMA ESPAÑA S.A. was fined by the AEPD in the amount of 3,000 EUR for sending unsolicited advertising SMS messages to customers. The conduct breached Article 21 of the LSSI on marketing communications without prior consent.ESAEPDePrivacy€3,000
05 Mar 2021APARTAMENTOS PLAYA DE COVACHOS, S.L.The company was fined by the AEPD in the amount of 1,000 EUR for operating video surveillance without the required information for recorded individuals. It did not identify the data controller, explain how rights could be exercised, or state the purpose of the surveillance, which breaches Article 13 GDPR.ESAEPDGDPR€1,000
01 Jan 2018MAISONS DU MONDE ESPAÑA, S.L.MAISONS DU MONDE ESPAÑA, S.L. was fined by the AEPD 15,000 EUR for sending unsolicited commercial SMS messages. The company did not provide recipients with an effective opt-out mechanism, despite prior requests to unsubscribe.ESAEPDePrivacy€15,000
20 Feb 2025NAROBESA INV, S.L.NAROBESA INV, S.L. was fined EUR 2,000 by the AEPD for failing to provide the required documentation to the data protection authority. The case concerns a breach of the cooperation duty under Article 58(1) GDPR.ESAEPDGDPR€2,000
01 Jan 2019XFERA MÓVILES, S.A. (MASMOVIL)XFERA MÓVILES, S.A. (MASMOVIL) was fined by the AEPD €60,000 for changing a customer's contract details without proper consent. The authority found that the processing lacked a valid legal basis under GDPR Article 6(1)(a).ESAEPDGDPR€60,000
01 Jan 2013NOVOPRINT, C.B.NOVOPRINT, C.B. was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails. The emails did not include an unsubscribe mechanism, which breached Article 21 of the LSSI.ESAEPDePrivacy€1,800
25 Jul 2021CYNGASA, S.L.CYNGASA, S.L. was fined by the AEPD EUR 5,000 for transferring an employee’s personal data to another company without consent. The authority found this conduct to be a breach of Article 6 of the GDPR.ESAEPDGDPR€5,000
05 May 2022THOMAS INTERNATIONAL SYSTEMS, S.A.THOMAS INTERNATIONAL SYSTEMS, S.A. was fined by the AEPD 50,000 EUR for processing special categories of personal data without proper legal justification. The company requested sensitive information, including disability and ethnicity, in psychometric questionnaires.ESAEPDGDPR€50,000
02 Jul 2019XFERA MÓVILES, S.A. (YOIGO)XFERA MÓVILES, S.A. (YOIGO) was fined by the AEPD EUR 60,000 for failing to implement adequate security measures. This allowed unauthorized access to personal data through its website.ESAEPDGDPR€60,000
01 Sept 2021ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined by the AEPD 50,000 EUR for making unsolicited marketing calls and sending messages without consent. The conduct breached data protection principles.ESAEPDGDPR€50,000
14 Dec 2022MÁRMOLES Y GRANITOS MEJIAS, S. L.The company was fined by the AEPD in the amount of 600 EUR for operating a video surveillance system without proper signage and required authorization. This may have infringed the rights of third parties and data protection rules.ESAEPDGDPR€600
13 Nov 2023RECICLAJES LOGROÑO, S.L.RECICLAJES LOGROÑO, S.L. was fined by the AEPD 10,000 EUR for photocopying a customer's ID without consent and for failing to provide privacy policy information. The authority found breaches of GDPR data minimization and transparency principles.ESAEPDGDPR€10,000
12 Jan 2023ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.ASNEF-EQUIFAX was fined by the AEPD EUR 5,000 for including personal data in a credit file without prior notice. The company also failed to respond to access requests, which constitutes a breach of GDPR Article 15.ESAEPDGDPR€5,000
23 Jun 2020SALBEGAP, S.L.SALBEGAP, S.L. was fined by the AEPD EUR 2,000 for installing surveillance cameras in common areas without authorization from the homeowners' association. The authority found that this breached data protection principles.ESAEPDGDPR€2,000
01 Jan 2014EL CORTE INGLES, S.A.EL CORTE INGLES, S.A. was fined by the AEPD 1,000 EUR for sending unsolicited commercial emails. The conduct breached Article 21.1 of Spain’s LSSI, which restricts marketing communications without recipient consent.ESAEPDePrivacy€1,000
16 Oct 2013FRANCE TELECOM ESPAÑA, S.A.FRANCE TELECOM ESPAÑA, S.A. was fined by the AEPD for sending commercial emails to a complainant despite a request not to use personal data for advertising purposes. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€33,001
19 Jan 2022DISPLAY CONNECTORS, S.L.DISPLAY CONNECTORS, S.L. was fined by the AEPD EUR 50,000 for processing excessive personal data, including the name of a minor, that was not necessary for the intended purpose. The authority found this to be a breach of data protection principles.ESAEPDGDPR€50,000
22 Feb 2023B.B.B.The entity was fined by the AEPD 300 EUR for installing a surveillance camera that could capture images of a neighboring property without authorization. The authority treated this as a breach of data protection rules.ESAEPDGDPR€300