BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 Jul 2015 | Art Sposa s.r.l.Art Sposa s.r.l. was fined by the Garante in the amount of EUR 2,400 for failing to provide the required privacy notice to users submitting personal data through its website contact form. The conduct breached Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 17 Jul 2015 | VUELING AIRLINES, S.A.VUELING AIRLINES, S.A. was fined by the AEPD 5,000 EUR for sending unsolicited commercial emails to a user who had previously unsubscribed. The authority found this breached article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 16 Jul 2015 | VUELING AIRLINES S.A.VUELING AIRLINES S.A. was fined by the AEPD 5,000 EUR for sending unsolicited commercial emails to a user who had unsubscribed. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 08 Jul 2015 | Chirco MicheleChirco Michele was fined for processing personal data through a video surveillance system without providing the required information notice to the data subjects. This constituted a breach of Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 08 Jul 2015 | Perez s.r.l.Perez s.r.l. was fined by the Garante for failing to provide the required privacy notice to users whose personal data were collected through its website. This constituted a breach of Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 08 Jul 2015 | FNAC Italia s.r.l.FNAC Italia s.r.l. was fined €2,400 by the Garante. The authority found that the company did not provide data subjects with adequate information about the purpose of processing under its video surveillance system. | IT | Garante | GDPR | €2,400 | ↗ |
| 08 Jul 2015 | Autotrasporti Multipli Arcese SpaAutotrasporti Multipli Arcese Spa was fined 12,000 EUR by the Garante for retaining surveillance footage longer than the period allowed under the authority's guidelines. The case concerns non-compliance with data protection rules on video retention. | IT | Garante | GDPR | €12,000 | ↗ |
| 07 Jul 2015 | OLYMPION XENODOXEION AEThe company was fined by the HDPA EUR 5,000 for failing to implement appropriate organizational and technical security measures. The deficiency led to a data breach involving credit card information. | GR | HDPA | GDPR | €5,000 | ↗ |
| 02 Jul 2015 | Lu JiruiLu Jirui was fined EUR 2,400 by the Garante for processing personal data through a video surveillance system without providing the required information to data subjects. The breach concerned Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 02 Jul 2015 | Lu JiruLu Jiru was fined EUR 2,400 by the Garante. The authority found that personal data were processed through a video surveillance system without providing the required information to data subjects, in breach of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 02 Jul 2015 | Lycamobile s.r.l.Lycamobile s.r.l. was fined EUR 102,000 by the Garante for failing to provide requested information on the retention of telephone and telematic traffic data. The case concerned a breach of data protection rules. | IT | Garante | GDPR | €102,000 | ↗ |
| 02 Jul 2015 | Ordinanza ingiunzione - 2 luglio 2015 [4337649]The condominium administrator did not respond to requests for information related to a data protection complaint. Garante imposed a fine of EUR 4,000 for violating data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 25 Jun 2015 | San Bartolo s.r.l.San Bartolo s.r.l. was fined by the Garante for processing employees’ biometric data without prior notification and without the required preliminary verification. The case concerns a breach of privacy rules governing special-category data. | IT | Garante | GDPR | €24,000 | ↗ |
| 25 Jun 2015 | Comune di ParmaComune di Parma was fined EUR 4,000 by the Garante for unlawfully publishing candidates' personal data on its institutional website. The authority found a breach of data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 25 Jun 2015 | Azienda di Servizi per la persona "Carlo Pezzani" di VogheraThe company published the personal data of five guests on its website without a legal basis. This breached privacy rules and led to a fine imposed by the Garante. | IT | Garante | GDPR | €4,000 | ↗ |
| 24 Jun 2015 | Telefónica Móviles España SAUTelefónica Móviles España SAU was fined by the AEPD 12,500 EUR for sending unauthorized commercial SMS messages. The authority also found that the company failed to provide a simple opt-out mechanism, in breach of LSSI rules. | ES | AEPD | ePrivacy | €12,500 | ↗ |
| 19 Jun 2015 | TEKOA CANALTV, S.L.TEKOA CANALTV, S.L. was fined by the AEPD in the amount of 55,000 EUR for sending 25 commercial SMS messages without prior consent from recipients. The authority also noted the absence of an opt-out mechanism, in breach of the LSSI. | ES | AEPD | ePrivacy | €55,000 | ↗ |
| 18 Jun 2015 | Azienda USL5 di PisaAzienda USL5 di Pisa was fined EUR 6,000 for unlawful processing of personal data through a video surveillance system. The authority found that the required information notice was not provided to individuals, in breach of Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €6,000 | ↗ |
| 18 Jun 2015 | Wind Telecomunicazioni SpaWind Telecomunicazioni Spa was fined EUR 130,000 by the Garante. The case concerned the unlawful disclosure of mobile phone numbers in the White Pages directory without proper consent. | IT | Garante | GDPR | €130,000 | ↗ |
| 18 Jun 2015 | Azienda Ospedaliera Ospedale di Circolo Fondazione MacchiAzienda Ospedaliera Ospedale di Circolo Fondazione Macchi was fined by the Garante 4,000 EUR for processing sensitive personal data without obtaining written consent. This breached the Italian Data Protection Code. The case highlights the need for a valid legal basis before processing special-category data. | IT | Garante | GDPR | €4,000 | ↗ |