BULLETIN №083Last updated · 10 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2024 | CIBERSEO JAÉN, S.L.CIBERSEO JAÉN, S.L. was fined EUR 1,500 by the AEPD for publishing a photograph of an individual without consent on a job search website. The case concerned processing personal data without a lawful basis, contrary to Article 6 of the GDPR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 13 Nov 2021 | IMPERIUM C.B.IMPERIUM C.B. was fined by the AEPD in the amount of 1,500 EUR for failing to provide informational signage about its video surveillance system. The authority found a breach of Article 13 GDPR because individuals on the premises were not given the required notice. | ES | AEPD | GDPR | €1,500 | ↗ |
| 12 May 2023 | Noi sancțiuniA company in the insurance sector was fined by ANSPDCP in the amount of 1,500 EUR for violating GDPR Article 5. The case concerned non-compliance with the basic principles for processing personal data. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 06 Apr 2023 | К. Л. НK. L. N was fined for unlawfully processing voters' personal data. The case involved forwarding an email containing scanned voting lists to a personal email address, in breach of GDPR Article 6. | BG | CPDP | GDPR | €767 | ↗ |
| 09 Sept 2022 | COMUNIDAD PROPIETARIO R.R.R.The entity installed a video surveillance system without approval from the property owners' association. The authority found this to be a breach of data protection rules and imposed a fine of 1,500 EUR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 05 Jun 2020 | BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 12 Apr 2021 | COMUNIDAD DE PROPIETARIOS R.R.R.The entity was fined by the AEPD EUR 1,500 for installing a video surveillance system without the required authorization from the homeowners' association. The case concerned a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2015 | INSTITUTO SUPERIOR DE ESTUDIOS EMPRESARIALES CAMBRIDGE S.A.The entity was fined by the AEPD 1,500 EUR for sending commercial messages without providing recipients a way to oppose further communications. The authority treated this as a breach of the right to data cancellation and control over continued contact. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 30 Jul 2014 | ORANGE ESPAGNE S.A.U.ORANGE ESPAGNE S.A.U. was fined by the AEPD EUR 1,500 for sending unsolicited commercial SMS messages. The recipient had previously requested removal from the advertising list, and the conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 26 Aug 2021 | B.B.B.The entity was fined by the AEPD in the amount of EUR 1,500 for installing surveillance cameras that excessively recorded private areas of third parties. The authority found this to be a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |
| 22 Feb 2021 | B.B.B.A fine was imposed for installing a surveillance camera aimed at public and private spaces without justification. The authority found a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |
| 02 Mar 2023 | WILLOUGHBY COLLEGE, S.A.WILLOUGHBY COLLEGE, S.A. failed to provide requested information to the Spanish Data Protection Agency, which constituted a breach of Article 58.1 of the GDPR. A fine was imposed and reduced due to early payment and acknowledgment of responsibility. | ES | AEPD | GDPR | €1,500 | ↗ |
| 04 Jun 2020 | AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 31 Mar 2022 | Anonymised (CyDPC Απόφαση για λειτουργία ΚΚΒΠ.pd)The case concerned the unlawful installation and operation of a CCTV system in a shared waiting area of a pediatric and dental clinic. A fine of EUR 1,500 was imposed for failure to cooperate with the supervisory authority under GDPR Article 31. | CY | CyDPC | GDPR | €1,500 | ↗ |
| 27 Oct 2025 | Anonymisiert (DSB 2025-0.811.087)The controller unlawfully processed personal data through video surveillance, including public sidewalk areas, contrary to data minimization principles. Images were also published online without a legal basis. | AT | DSB | GDPR | €1,500 | ↗ |
| 01 Sept 2021 | B.B.B.The entity was fined by the AEPD for operating a video surveillance system that unjustifiably affected the privacy of third parties. The case indicates a lack of adequate safeguards or proportionality in data processing. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2019 | COMERCIAL VIGOBRANDY, S.L.COMERCIAL VIGOBRANDY, S.L. was fined by the AEPD 1,500 EUR for installing a video surveillance camera without the required informational sign inside the premises. The case concerned a breach of data protection rules and the duty to properly inform individuals being recorded. | ES | AEPD | GDPR | €1,500 | ↗ |
| 08 Jun 2020 | B.B.B.B.B.B. was fined by the AEPD 1,500 EUR for maintaining a video surveillance camera directed toward common areas without justified cause. The conduct caused anxiety to the complainant and was treated as a data protection breach. | ES | AEPD | GDPR | €1,500 | ↗ |
| 09 Aug 2022 | Denmar Nacrut SRLDenmar Nacrut SRL was fined EUR 1,500 by ANSPDCP for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 08 Aug 2014 | Anonymised (HDPA 115/2014)The controller was fined for processing personal data without consent and for sending unsolicited marketing messages. The case indicates breaches of core data protection and marketing communication obligations. | GR | HDPA | ePrivacy | €1,500 | ↗ |