Order report
BULLETIN №083Last updated · 09 Aug 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
01 Mar 2017ESPASA CALPE, S.A.ESPASA CALPE, S.A. was fined EUR 2,500 by the AEPD for continuing to send commercial emails to a customer after confirming deletion of the customer’s personal data. The authority found this to be a breach of electronic communications and data protection rules.ESAEPDePrivacy€2,500↗
23 Apr 2023GRIMEY WEAR, S.L.GRIMEY WEAR, S.L. did not delete the complainant’s personal data after a request and continued sending promotional emails. The AEPD found this to be a breach of Article 17 GDPR and imposed a fine of 10,000 EUR.ESAEPDGDPR€10,000↗
08 May 2024CREMA GAMES, S.L.CREMA GAMES, S.L. was fined EUR 5,000 by the AEPD for breaching Article 15 of the GDPR. The company obstructed the complainant’s exercise of the right of access to their personal data.ESAEPDGDPR€5,000↗
31 May 2024MEDIOS DE PREVENCIÓN EXTERNOS, S.L.MEDIOS DE PREVENCIÓN EXTERNOS, S.L. was fined by the AEPD for leaving medical documentation of police and civil guard agents in a public place. The authority found this to be a breach of data protection rules.ESAEPDGDPR€100,000↗
27 May 2022B.B.B.B.B.B. was fined EUR 2,000 by the AEPD for failing to provide adequate data protection information in rental contract documentation. The authority found a breach of Article 13 GDPR.ESAEPDGDPR€2,000↗
01 Jan 2022Telefónica Móviles España, S.A.U.Telefónica Móviles España, S.A.U. was fined by the AEPD EUR 15,000 for processing personal data without a legal basis. The case involved a contract fraudulently created in the complainant's name without consent.ESAEPDGDPR€15,000↗
23 Sept 2019VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 60,000 EUR for processing personal data without consent. The breach led to an unauthorized service change and debt collection attempts.ESAEPDGDPR€60,000↗
31 Jan 2023PRESTAMER, S.L.PRESTAMER, S.L. sent an email to 472 recipients without using BCC, which exposed recipients’ personal data. The AEPD imposed a 3,000 EUR fine for breaching data protection rules.ESAEPDGDPR€3,000↗
07 Jan 2020CHENMING YE (BAZAR REAL)CHENMING YE (BAZAR REAL) was fined EUR 900 by the AEPD. The authority found that the required visible notice identifying the data controller was missing, which breached data protection rules.ESAEPDGDPR€900↗
11 Aug 2020FEDERACIÓN DE BALONCESTO DE CASTILLA Y LEÓNFEDERACIÓN DE BALONCESTO DE CASTILLA Y LEÓN was fined by the AEPD 5,000 EUR for the unauthorized disclosure of personal data. The data included names, DNI numbers, and signatures, which were published in a newspaper and on social media.ESAEPDGDPR€5,000↗
20 Dec 2019TECSIBLE, S.L.TECSIBLE, S.L. was fined by the AEPD 5,000 EUR for a data protection breach. The case involved unsolicited contact and messages sent to an individual on the Robinson list through a third-party call center.ESAEPDGDPR€5,000↗
01 Jan 2013EUROPCAR IB S.A.EUROPCAR IB S.A. was fined by the AEPD 1,200 EUR for sending unsolicited commercial emails to a user. The recipient had previously asked not to receive such communications, which breached Article 21 of the LSSI.ESAEPDePrivacy€1,200↗
01 Jan 2023B.B.B.The entity was fined EUR 600 by the AEPD for improperly directing surveillance cameras toward a neighbor's property. This conduct breached data protection rules and affected the privacy of third parties.ESAEPDGDPR€600↗
01 Jan 2019CORPORACION DE RADIO Y TELEVISION ESPAÑOLA SACORPORACION DE RADIO Y TELEVISION ESPAÑOLA SA was fined by the AEPD for a security incident involving the loss of unencrypted USB drives containing personal data. The authority found a breach of Article 32 GDPR on appropriate technical and organisational security measures.ESAEPDGDPR€60,000↗
08 Nov 2022B.B.B.The entity installed a surveillance camera on the facade of a residence without the required administrative authorization. The camera captured public areas and the complainant’s home entrance, breaching data protection principles.ESAEPDGDPR€300↗
25 Jun 2024COMUNIDAD.1The community of property owners disclosed a resident’s personal data, including their DNI, in meeting minutes. AEPD found this breached confidentiality principles and imposed a 300 EUR fine.ESAEPDGDPR€300↗
01 Jan 2016GRUPO YAMM COMIDA A DOMICILIO S.L.The entity was fined for sending unsolicited commercial emails and for failing to honor unsubscribe requests. This constituted a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€1,700↗
16 Dec 2022INTER PARTNER ASSISTANCE SERVICIOS ESPAÑA, S.A.INTER PARTNER ASSISTANCE SERVICIOS ESPAÑA, S.A. was fined by the AEPD 30,000 EUR for potentially transferring personal data internationally without proper disclosure. This was contrary to the company’s stated privacy policies.ESAEPDGDPR€30,000↗
19 Nov 2018VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 5,000 EUR for breaching data quality principles. The company incorrectly included personal data in a creditworthiness file despite a prior order to correct billing errors.ESAEPDGDPR€5,000↗
28 Mar 2022CENTRO MÉDICO SALUS BALEARES, S.L.CENTRO MÉDICO SALUS BALEARES, S.L. was fined by the AEPD 30,000 EUR for breaching data protection rules. The case concerned displaying patients’ body temperatures in a way that could be seen by unauthorized third parties, which compromised confidentiality.ESAEPDGDPR€30,000↗