Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
17 May 2021	VODAFONE ESPAÑA, S.A.U.Vodafone España, S.A.U. was fined by the AEPD 80,000 EUR for processing personal data without proper consent. The case involved linking phone lines to incorrect data and enrolling a customer in services without authorization.	ES	AEPD	GDPR	€80,000	↗
01 Jan 2013	OPEN COMUNICACION, S.L.OPEN COMUNICACION, S.L. was fined by the AEPD in the amount of 30,001 EUR for sending numerous unsolicited advertising emails without prior express consent from recipients. The authority also found that the company failed to provide an effective system for recipients to object to such messages, in breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
25 Feb 2022	DIGITAL CONTENT DISTRIBUTION LTD.DIGITAL CONTENT DISTRIBUTION LTD. was fined by the AEPD EUR 100 for sending marketing emails without the recipient's consent. The conduct breached Article 21 of the LSSI on electronic commercial communications.	ES	AEPD	ePrivacy	€100	↗
01 Jan 2019	XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 60,000 by the AEPD for processing personal data without a legal basis. The authority found a breach of Article 6 GDPR, meaning the processing lacked a lawful basis.	ES	AEPD	GDPR	€60,000	↗
20 Dec 2025	KVIKU SPAIN, S.L.KVIKU SPAIN, S.L. was fined by the AEPD 5,000 EUR for processing personal data without a legal basis. The case concerned debt collection related to a loan that the complainant had neither consented to nor requested.	ES	AEPD	GDPR	€5,000	↗
16 Jun 2023	BORSA MEDIC, S.L.BORSA MEDIC, S.L. was fined 10,000 EUR by the AEPD for failing to comply with a data deletion request and for sending unsolicited advertising emails after the recipient objected. The case concerns breaches of data protection and electronic commerce rules.	ES	AEPD	ePrivacy	€10,000	↗
02 Nov 2021	MYHERITAGE, LTDMYHERITAGE, LTD was fined EUR 20,000 by the AEPD for international data transfers without adequate safeguards and for unclear legal grounds for processing. The authority also found insufficient information provided to data subjects and improper handling of genetic data.	ES	AEPD	ePrivacy	€20,000	↗
07 Apr 2021	EDICIONES TU REFORMA, S.L.EDICIONES TU REFORMA, S.L. was fined by the AEPD EUR 1,500 for sending unsolicited commercial SMS messages without the recipient's consent. This conduct breached Article 21 of the LSSI on commercial communications.	ES	AEPD	ePrivacy	€1,500	↗
24 Nov 2022	D. B.B.B.The entity was fined EUR 300 by the AEPD for installing surveillance cameras on a building facade facing public areas without prior administrative authorization. The authority found this to be a breach of Article 5(1)(c) GDPR.	ES	AEPD	GDPR	€300	↗
23 Oct 2019	CERRAJERIA VERIN S.L.CERRAJERIA VERIN S.L. was fined by the AEPD EUR 1,500 for collecting personal data without providing the required information to data subjects. The authority found a breach of Article 13 GDPR.	ES	AEPD	GDPR	€1,500	↗
24 Jun 2015	Telefónica Móviles España SAUTelefónica Móviles España SAU was fined by the AEPD 12,500 EUR for sending unauthorized commercial SMS messages. The authority also found that the company failed to provide a simple opt-out mechanism, in breach of LSSI rules.	ES	AEPD	ePrivacy	€12,500	↗
24 May 2013	ARGATEL SOLUTIONS SLARGATEL SOLUTIONS SL was fined EUR 600 by the AEPD. The sanction concerned sending unsolicited premium SMS advertisements without recipient consent, in breach of Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
24 Jan 2026	CENTRO MÉDICO REY FERNANDO, S.L.P.The entity charged a fee for providing a patient with their medical history, which breached the right of access under GDPR Article 12. The AEPD imposed a fine of 1,000 EUR.	ES	AEPD	GDPR	€1,000	↗
29 Jan 2025	SINDICATO DE LA ADMON. PÚBLICA DE LA CGT EN JEREZ Y COSTA NOROESTE DE CÁDIZThe union was fined by the AEPD for failing to comply with data protection principles and for not informing individuals about the processing of their personal data. The case indicates shortcomings in transparency and GDPR compliance obligations.	ES	AEPD	GDPR	€2,000	↗
04 Oct 2017	PRENATAL SAPRENATAL SA was fined by the AEPD EUR 20,000 for sending commercial SMS messages without providing recipients with an opt-out mechanism. The case concerns a breach of electronic communications rules and marketing consent requirements.	ES	AEPD	ePrivacy	€20,000	↗
26 Nov 2024	AD735 DATA MEDIA ADVERTISING, S.L.AD735 DATA MEDIA ADVERTISING, S.L. was fined by the AEPD EUR 10,000 for sending unsolicited advertising emails. The messages were sent despite the recipient's unsubscribe request and inclusion on the Robinson list, breaching the LSSI.	ES	AEPD	ePrivacy	€10,000	↗
04 Mar 2021	VODAFONE ESPAÑA, S.A.U.Vodafone España was fined for processing personal data without a legal basis. The company linked a prepaid phone line to an individual without consent and shared the data with law enforcement.	ES	AEPD	GDPR	€100,000	↗
14 Mar 2023	DIGIMAN ALICANTE, S.L.DIGIMAN ALICANTE, S.L. was fined 2,000 EUR by the AEPD for failing to remove an ex-employee’s image from its YouTube channel despite repeated requests. The authority found a breach of GDPR Article 6(1) regarding the lawful basis for processing personal data.	ES	AEPD	GDPR	€2,000	↗
13 Sept 2024	DIGITAL PHOTO IMAGE, S.A.DIGITAL PHOTO IMAGE, S.A. was fined EUR 20,000 by the AEPD for breaching the LSSI. The company sent emails without providing recipients with a valid means to exercise their right to stop receiving such communications.	ES	AEPD	ePrivacy	€20,000	↗
01 Jan 2024	ESCOLA LES CAROLINES COOP. V.The school was fined by the AEPD 10,000 EUR for processing a minor’s image without a lawful basis. The child’s photograph was displayed on posters inside the school premises, which was found to breach GDPR Article 6(1).	ES	AEPD	GDPR	€10,000	↗

Fine Tracker.