Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
18 May 2015ENDESA ENERGÍA, S.A.U.ENDESA ENERGÍA, S.A.U. was fined by the AEPD 5,000 EUR for sending commercial emails to a recipient who had requested to unsubscribe. The case concerns a breach of Article 21.1 of the LSSI and shows failure to respect an opt-out request.ESAEPDePrivacy€5,000
13 May 2015Iperal S.p.A.Iperal S.p.A. was fined EUR 40,000 by the Garante for activating 11 phone cards in the names of 5 individuals without their knowledge. The conduct breached data protection rules.ITGaranteGDPR€40,000
13 May 2015Barbirato Danilo s.a.s.Barbirato Danilo s.a.s. was fined by the Garante EUR 16,800 for failing to provide the required privacy notice on its website and for improper use of a video surveillance system. The authority cited inadequate CCTV signage and excessive retention of recorded images.ITGaranteGDPR€16,800
13 May 2015HellastatHellastat was fined by the HDPA EUR 5,000 for the illegal collection and use of data. The case concerned a breach of data protection laws.GRHDPAGDPR€5,000
13 May 2015Provincia di NapoliProvincia di Napoli was fined for unlawfully publishing personal data, including health information, on its institutional website. The authority found a breach of data protection rules.ITGaranteGDPR€10,000
13 May 2015HellastatHellastat was fined EUR 3,000 by the HDPA for failing to inform data subjects. The authority found a breach of data protection rules requiring transparent notice to individuals.GRHDPAGDPR€3,000
13 May 2015Gelpi Elettrodomestici S.r.l.Gelpi Elettrodomestici S.r.l. was fined 30,000 EUR by the Garante. The case concerned the activation of SIM cards in individuals' names without their knowledge, which breached data protection rules.ITGaranteGDPR€30,000
13 May 2015Ottodue s.r.l.Ottodue s.r.l. was fined EUR 12,000 by the Garante for retaining surveillance footage for 98 days. This exceeded the 7-day retention limit set out in the video surveillance guidelines.ITGaranteGDPR€12,000
13 May 2015ASL Napoli 2 NordASL Napoli 2 Nord was fined 20,000 EUR by the Garante for publishing personal data on its website. The disclosed information could reveal individuals' health status, which breached privacy rules.ITGaranteGDPR€20,000
13 May 2015Comune di LandrianoComune di Landriano was fined for processing personal data of children enrolling in the municipal nursery without providing the required information notice. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
13 May 2015Barbirato Danilo s.a.s. di Barbirato Marco e c.Barbirato Danilo s.a.s. was fined by the Garante 16,800 EUR for failing to provide the required privacy notice on its data collection form. The authority also found breaches of CCTV rules, including inadequate signage and excessive retention of recorded images.ITGaranteGDPR€16,800
07 May 2015Burger Joint/Maria Galioni I.K.E.The company was fined for unlawfully operating a video surveillance system in the workplace. The authority found a privacy violation because employees and customers were monitored without proper justification.GRHDPAGDPR€3,000
07 May 2015Pelamatti GiacomoPelamatti Giacomo was fined by the Garante EUR 10,000 for activating phone cards in the names of individuals without their knowledge. The authority found this to be a breach of data protection rules.ITGaranteGDPR€10,000
07 May 2015Ordinanza ingiunzione - 7 maggio 2015 [4226113]The Garante imposed a EUR 2,400 fine on the company for providing an inadequate privacy notice on its website contact form. The breach concerned the requirements of the Italian Data Protection Code.ITGaranteGDPR€2,400
07 May 2015Patru Dumitra DanielaPatru Dumitra Daniela was fined by the Garante in the amount of EUR 2,400 for operating a video surveillance system at the bar “New Liberty” without providing adequate simplified information. The authority treated this as a breach of privacy rules.ITGaranteGDPR€2,400
07 May 2015Provincia di FrosinoneProvincia di Frosinone was fined for failing to update the Security Policy Document (DPS) for several years. The authority found this to be a breach of security measures required under the Italian Data Protection Code.ITGaranteGDPR€10,000
07 May 2015Nappo Nicola JolandaNappo Nicola Jolanda was fined EUR 45,000 by the Garante for activating 37 phone cards in the names of 15 individuals without their knowledge. The conduct breached data protection rules.ITGaranteGDPR€45,000
07 May 2015Zampino Giuseppe GiovanniZampino Viaggi, operated by Zampino Giuseppe Giovanni, was fined 2,400 EUR by the Garante. The authority found that personal data were collected through the website without the required privacy notice, in breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
07 May 2015Comune di GenovaThe Municipality of Genoa was fined by the Garante for unlawfully keeping personal and judicial data on its institutional website beyond the legally permitted period. The authority found this to be a breach of data protection rules.ITGaranteGDPR€4,000
07 May 2015Lucchese FrancoLucchese Franco was fined by the Garante EUR 12,000 for retaining surveillance footage beyond the legally prescribed period. The case concerned non-compliance with data protection retention rules.ITGaranteGDPR€12,000