Order report
BULLETIN №084Last updated · 12 Aug 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
19 Dec 2024Pansiprod Distribuție SRLANSPDCP completed an investigation in November 2024 at Pansiprod Distribuție SRL and found a breach of GDPR provisions. The company was fined EUR 1,000.ROANSPDCPGDPR€1,000↗
19 Dec 2024CLUB RÁPIDO DE BOUZASThe club was fined by the AEPD for leaving documents containing players’ personal data, including minors’ data, in a public trash container. The authority found this breached data protection principles, especially confidentiality and security.ESAEPDGDPR€1,000↗
19 Dec 2024ENCAS ADMINISTRACIONS, S.L.ENCAS ADMINISTRACIONS, S.L. was fined 500 EUR by the AEPD. The case concerned sending emails containing personal data without proper consent, which breached data protection principles.ESAEPDGDPR€500↗
19 Dec 2024ACCES AUX SOINS (procédure simplifiée)The CNIL imposed an administrative fine of EUR 5,000 on ACCES AUX SOINS under a simplified procedure. The case concerns a breach of rules supervised by the CNIL.FRCNILGDPR€5,000↗
19 Dec 2024GROUPEMENT REGIONAL D'APPUI AU DEVELOPPEMENT DE LA E-SANTE (procédure simplifiée)CNIL imposed an administrative fine of EUR 20,000 on GROUPEMENT REGIONAL D'APPUI AU DEVELOPPEMENT DE LA E-SANTE under a simplified procedure. The decision concerns a regulatory breach addressed in the administrative proceeding.FRCNILGDPR€20,000↗
19 Dec 2024SOCIETE GERANT UNE SALLE DE SPORT (procédure simplifiée)The CNIL imposed an administrative fine of EUR 3,000 on SOCIETE GERANT UNE SALLE DE SPORT under a simplified procedure. The case concerns a breach of rules covered by the supervisory authority’s decision.FRCNILGDPR€3,000↗
19 Dec 2024STOMATOLOGUE (procédure simplifiée)CNIL imposed an administrative fine of EUR 5,000 on STOMATOLOGUE under a simplified procedure. The case concerned a breach that resulted in an administrative sanction.FRCNILGDPR€5,000↗
19 Dec 2024Comune di BresciaThe Garante fined the Municipality of Brescia EUR 10,000 for violations related to the processing of personal data at a cemetery. The case concerned the unauthorized disclosure of individuals’ identities.ITGaranteGDPR€10,000↗
19 Dec 2024SOCIETE EXERCANT UNE ACTIVITE D'AGENCE IMMOBILIERECNIL imposed an administrative fine of EUR 40,000 on SOCIETE EXERCANT UNE ACTIVITE D'AGENCE IMMOBILIERE. The case concerns a breach of rules supervised by CNIL.FRCNILGDPR€40,000↗
19 Dec 2024SOCIETE EDITANT UN SITE DE JEUX DEMATERIALISES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 15,000 on SOCIETE EDITANT UN SITE DE JEUX DEMATERIALISES. The decision was issued under a simplified procedure.FRCNILGDPR€15,000↗
19 Dec 2024SOCIETE SPECIALISEE DANS LE SECTEUR D'ACTIVITE DES PORTAILS INTERNET (procédure simplifiée)CNIL imposed an administrative fine of EUR 5,000 on SOCIETE SPECIALISEE DANS LE SECTEUR D'ACTIVITE DES PORTAILS INTERNET under a simplified procedure. The decision concerns a data protection breach identified by the authority.FRCNILGDPR€5,000↗
19 Dec 2024MEDECIN GENERALISTE (procédure simplifiée)The CNIL imposed EUR 2,000 on MEDECIN GENERALISTE under a simplified procedure as a liquidation of a penalty payment. The decision relates to failure to comply with a prior obligation within the required timeframe.FRCNILGDPR€2,000↗
19 Dec 2024SOCIETE ASSURANT DES ACTIVITES DE SECURITE PRIVE, PROTECTION RAPPROCHEE, HOTESSARIAT ET GESTION LOGISTIQUE (procédure simplifiée)CNIL imposed an administrative fine of EUR 8,000 on SOCIETE ASSURANT DES ACTIVITES DE SECURITE PRIVE, PROTECTION RAPPROCHEE, HOTESSARIAT ET GESTION LOGISTIQUE under a simplified procedure. The record indicates a regulatory breach, but no further details were provided.FRCNILGDPR€8,000↗
20 Dec 2024FUNDACIÓN SOCIEDAD CIENTÍFICA DE ONCOLOGÍA MÉDICAFUNDACIÓN SOCIEDAD CIENTÍFICA DE ONCOLOGÍA MÉDICA was fined 70,000 EUR by the AEPD for a data breach affecting confidentiality. The authority found a violation of Article 5(1)(f) GDPR, which requires personal data to be processed securely and confidentially.ESAEPDGDPR€70,000↗
20 Dec 2024OpenAIThe Italian data protection authority fined OpenAI EUR 15 million for GDPR noncompliance related to ChatGPT. The 20 December 2024 decision cites issues with the legal basis for training data processing, transparency obligations, age verification, breach notification, and the security and accuracy of outputs.ITGarante per la protezione dei dati personaliGDPR€15,000,000↗
20 Dec 2024English Home SRLEnglish Home SRL was fined EUR 1,000 by ANSPDCP for violating Article 21 of the GDPR. The case concerned failure to respect the data subject’s right to object to processing.ROANSPDCPGDPR€1,000↗
20 Dec 2024English Home SRLEnglish Home SRL was fined €4,000 by ANSPDCP for violating Article 21 of the GDPR. The case concerned failure to respect the data subject’s right to object to processing.ROANSPDCPGDPR€4,000↗
23 Dec 2024HYUNDAI MOTOR ESPAÑA S.L.U.HYUNDAI MOTOR ESPAÑA S.L.U. was fined EUR 2,000,000 by the AEPD for a data security incident. Unauthorized access to customer data occurred, breaching data protection principles.ESAEPDGDPR€2,000,000↗
23 Dec 2024Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined €2,000 by ANSPDCP for breaching Article 3 of the GDPR. The case concerned non-compliance with the rules on the regulation’s scope of application.ROANSPDCPGDPR€2,000↗
26 Dec 2024SOCIETE EXPLOITANT DES SUPERMARCHES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 18,000 on SOCIETE EXPLOITANT DES SUPERMARCHES. The case was handled under a simplified procedure.FRCNILGDPR€18,000↗