BULLETIN №083Last updated · 09 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 22 Jul 2019 | SANTI 3000, S.L.SANTI 3000, S.L. was fined by the AEPD for using video surveillance footage without informing employees. The authority treated this as a breach of data protection principles. | ES | AEPD | GDPR | €5,500 | ↗ |
| 16 Dec 2022 | NORDETIA CLINICS IBERIA, S.L.NORDETIA CLINICS IBERIA, S.L. was fined 3,000 EUR by the AEPD. The authority found that the company obstructed an inspection by failing to provide access required under Article 58(1) GDPR. | ES | AEPD | GDPR | €3,000 | ↗ |
| 19 Mar 2025 | XFERA MÓVILES, S.A.U.XFERA MÓVILES, S.A.U. was fined by the AEPD 10,000 EUR for sending unsolicited SMS advertisements to a number registered on the Robinson List. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 20 Apr 2023 | HOLALUZ-CLIDOM, S.A.HOLALUZ-CLIDOM, S.A. was fined EUR 70,000 by the AEPD for processing personal data without consent. The company registered energy supplies for properties without the owner's consent, which breached Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2019 | TELEFONICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined EUR 30,000 by the AEPD for charging a customer for a phone line they did not own. The authority found a breach of the GDPR data accuracy principle. | ES | AEPD | GDPR | €30,000 | ↗ |
| 07 Dec 2023 | ASESORÍA Y PROGRAMACIÓN PROFESIONAL, S.L.The entity was fined for continuing to send advertising emails despite the recipient's attempts to unsubscribe. This conduct breached Article 21 of the LSSI and resulted in a EUR 5,000 penalty. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2025 | STRATESYS TECHNOLOGY SOLUTIONS, S.L.STRATESYS TECHNOLOGY SOLUTIONS, S.L. was fined EUR 100,000 by the AEPD for breaching Article 5(1)(f) of the GDPR. The case concerned a failure to protect the integrity and confidentiality of personal data. | ES | AEPD | GDPR | €100,000 | ↗ |
| 20 Dec 2021 | INSEKT FOOD S.L.INSEKT FOOD S.L. was fined by the AEPD EUR 4,000 for sharing an individual's personal data in WhatsApp group chats without consent. The authority found that the processing lacked a lawful basis under Article 6 of the GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 10 Oct 2016 | ROCK INTERNET S.L.ROCK INTERNET S.L. was fined 3,800 EUR by the AEPD. The case concerned sending unsolicited commercial emails without recipient consent, in breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €3,800 | ↗ |
| 01 Jan 2015 | JAZZ TELECOM SAUJAZZ TELECOM SAU was fined by the AEPD 2,900 EUR for sending unsolicited SMS advertisements to a complainant. The conduct breached Article 21 of the LSSI on commercial communications without prior consent. | ES | AEPD | ePrivacy | €2,900 | ↗ |
| 26 Feb 2021 | PINTODIS, S.L.PINTODIS, S.L. was fined by the AEPD for installing surveillance cameras that recorded employees in private areas without sufficient justification. The authority found this to be a breach of data protection principles. | ES | AEPD | GDPR | €10,000 | ↗ |
| 07 Aug 2023 | FORMACIÓN Y EMPLEO DE EXTREMADURA, S.L.The company sent emails to multiple recipients without using BCC, allowing each recipient to see the other recipients’ email addresses. AEPD treated this as a breach of data protection rules and imposed an 8,000 EUR fine. | ES | AEPD | GDPR | €8,000 | ↗ |
| 11 Aug 2020 | DERDIX 5000 SLThe entity published photos of minors in a magazine without obtaining consent, which constitutes a breach of data protection rules. The case concerns the unauthorized disclosure of children’s images and was sanctioned by the AEPD. | ES | AEPD | GDPR | €2,000 | ↗ |
| 29 Apr 2022 | C.P. ***COMUNIDAD.1The entity installed surveillance cameras without informing the property owners. It also failed to provide the required information on the surveillance signs. | ES | AEPD | GDPR | €800 | ↗ |
| 26 Jun 2020 | ESLORA PROYECTOS, S.L.ESLORA PROYECTOS, S.L. was fined by the AEPD 10,000 EUR for failing to provide cookie information and for not obtaining user consent before using cookies. The authority cited a breach of Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2019 | B.B.B.B.B.B. was fined 2,000 EUR by the AEPD for reusing paper containing personal data. This made the data accessible to third parties without consent, constituting a breach of data protection rules. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2025 | A.A.A.A.A.A. failed to properly handle a data access request, which constitutes a breach of Article 15 GDPR. The AEPD imposed a fine of EUR 200, reduced to EUR 160 for early payment. | ES | AEPD | GDPR | €200 | ↗ |
| 01 Jan 2016 | EDUCACION COMPETENCIAL S.L.EDUCACION COMPETENCIAL S.L. was fined by the AEPD €6,000 for sending unsolicited advertising emails. The emails exposed recipients’ addresses, breaching data protection and electronic communications rules. | ES | AEPD | ePrivacy | €6,000 | ↗ |
| 26 May 2022 | PREICO JURIDICOS S.L.PREICO JURIDICOS S.L. was fined EUR 6,000 by the AEPD for failing to provide required information. The case concerned a breach of Article 58(1) GDPR. | ES | AEPD | GDPR | €6,000 | ↗ |
| 05 Feb 2025 | RESIDENTIAL QUALITY ENJOY, S.L.The company was fined EUR 2,000 by the AEPD for requesting and processing personal data, including minors' IDs, without proper consent or information. The authority found this to be a breach of data protection principles and transparency obligations. | ES | AEPD | GDPR | €2,000 | ↗ |