BULLETIN №083Last updated · 09 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 24 Jul 2020 | I-DE REDES ELÉCTRICAS INTELIGENTES, S.A.UI-DE REDES ELÉCTRICAS INTELIGENTES, S.A.U was fined by the AEPD EUR 200,000 for sending letters to customers without a legal basis. The authority found that this breached the principles of data minimization and purpose limitation. | ES | AEPD | GDPR | €200,000 | ↗ |
| 19 Feb 2025 | EDA TV CONSULTING, S.L.EDA TV CONSULTING, S.L. was fined by the AEPD EUR 2,000 for failing to comply with cookie policy requirements on its website. The breach concerned obligations under the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 25 Feb 2024 | SOCIEDAD ANDALUZA DE CHARTERS ATLÁNTICOS S.L.The company was fined EUR 500 by the AEPD for collecting excessive personal data during guest registration. In particular, it obtained full copies of ID documents and facial photographs, which breached the data minimization principle. | ES | AEPD | GDPR | €500 | ↗ |
| 01 Jan 2020 | VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 50,000 EUR for sending unsolicited promotional SMS messages. The messages were sent despite the complainant having exercised the right to object and request deletion of their data, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €50,000 | ↗ |
| 01 Jan 2016 | AUTOCLUB MUTUA MADRILEÑA S.L.AUTOCLUB MUTUA MADRILEÑA S.L. was fined by the AEPD 5,000 EUR for sending an unsolicited commercial SMS without prior consent. The authority also found that no opt-out mechanism was provided, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 03 May 2024 | D.D.D.The entity published images of a minor on its Telegram channel without consent, breaching data protection rules. AEPD imposed a fine of EUR 5,000. | ES | AEPD | GDPR | €5,000 | ↗ |
| 02 Sept 2019 | LA SALA 2015 S.L.U.LA SALA 2015 S.L.U. was fined by the AEPD 1,500 EUR for improper processing of personal data through a video surveillance system. The cameras captured images disproportionately from public sidewalks without the required legal basis. | ES | AEPD | GDPR | €1,500 | ↗ |
| 20 Jan 2021 | BICLAMEDIA, S.L.BICLAMEDIA, S.L. was fined 1,500 EUR by the AEPD for sending commercial emails without the recipient’s consent. The conduct breached Article 21 of the LSSI governing electronic marketing communications. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 20 May 2022 | THUNDER HUNTER ENERGY ADVISORS, S.L.THUNDER HUNTER ENERGY ADVISORS, S.L. was fined by the AEPD 1,000 EUR for sending unsolicited commercial emails without prior consent. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 08 Jan 2024 | INVERTIA TENERIFE 2019, S.L.INVERTIA TENERIFE 2019, S.L. was fined 1,000 EUR by the AEPD for failing to meet its information obligations toward data subjects. The authority found that the required information under Article 13 GDPR was not provided. | ES | AEPD | GDPR | €1,000 | ↗ |
| 22 Nov 2024 | MAXPOWER FITNESS NUTRITION, S.L.MAXPOWER FITNESS NUTRITION, S.L. was fined by the AEPD in the amount of 2,000 EUR for deficiencies in its cookie policy. The breach concerned the information and consent requirements under the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 05 Jan 2022 | B.B.B.A camera was installed in a vehicle parked in a community garage and recorded communal areas. The community was not informed and no required signage was displayed, resulting in a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 24 Jun 2023 | BANCO BILBAO VIZCAYA ARGENTARIA, S.A.BBVA was fined EUR 5,000 by the AEPD for repeatedly sending commercial emails to a client despite requests to unsubscribe. The authority found this breached Article 21 of the LSSI on unsolicited commercial communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 24 Jan 2026 | IBERANUNCIOS SLIBERANUNCIOS SL was fined by the AEPD EUR 15,000 for a data protection breach. The incident allowed unauthorized access to personal data, breaching the confidentiality principle under GDPR. | ES | AEPD | GDPR | €15,000 | ↗ |
| 29 Dec 2023 | CORPORACIÓN DUAL GRUPO LC, S.L.CORPORACIÓN DUAL GRUPO LC, S.L. was fined €500 by the AEPD for failing to provide access to personal data and information requested by the data protection authority. The case concerns non-compliance with GDPR obligations, including Article 58(1). | ES | AEPD | GDPR | €500 | ↗ |
| 16 Sept 2010 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 30,001 EUR for sending unsolicited advertising messages to a former customer. The authority found this conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 08 Oct 2014 | LOHER PUBLICIDAD, S.L.LOHER PUBLICIDAD, S.L. was fined by the AEPD 1,000 EUR for sending commercial emails without prior consent from recipients. The authority also found that the messages did not include an effective opt-out mechanism, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 16 Jun 2022 | Rapido Finance, S.L.Rapido Finance, S.L. was fined 2,000 EUR by the AEPD for unlawfully processing personal data. The company continued to pursue a debt that had already been paid, which breached Article 6(1) GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2021 | B.B.B.The sanctioned individual installed a video surveillance camera covering common areas without informed consent. This breached data protection rules and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €1,500 | ↗ |
| 25 Oct 2017 | EDITORIAL ECOPRENSA, S.A.EDITORIAL ECOPRENSA, S.A. was fined EUR 15,000 by the AEPD for failing to register user data files with the data protection authority, providing inconsistent privacy information, and irregularly sharing data with third parties. The case indicates deficiencies in core transparency obligations and control over personal data disclosures. | ES | AEPD | ePrivacy | €15,000 | ↗ |