Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
20 Nov 2014Asl Napoli 2 nordThe Garante imposed a 16,000 EUR fine on Asl Napoli 2 nord for failing to designate data protection officers and for keeping surveillance footage longer than permitted without prior authorization. The case concerned organizational compliance failures and unlawful data retention.ITGaranteGDPR€16,000
20 Nov 2014Centro Nautico Tirreno s.r.l.Centro Nautico Tirreno s.r.l. was fined by the Garante 2,400 EUR for failing to provide the required privacy notice when collecting personal data through a web form. The authority found that individuals were not properly informed before their data was collected.ITGaranteGDPR€2,400
20 Nov 2014Impresa costruzioni edili e stradali – dr. Ing. Michele Bianchi & C. - s.r.l.The company was fined by the Garante 2,400 EUR for failing to provide the required privacy notice to data subjects when collecting personal data through a web form on its website. The case concerned a breach of the Italian Data Protection Code.ITGaranteGDPR€2,400
20 Nov 2014Aimon s.r.l.Aimon s.r.l. was fined EUR 32,000 by the Garante for sharing customers’ personal data with various companies without proper notice and consent. The authority found that the conduct breached privacy rules.ITGaranteGDPR€32,000
20 Nov 2014Andrea Romualdo CerriAndrea Romualdo Cerri was fined €2,400 by the Garante. The violation concerned failing to provide the required information to data subjects when collecting personal data through a web form on the company website.ITGaranteGDPR€2,400
14 Nov 2014TELEFÓNICA MÓVILES ESPAÑA S.A.U.TELEFÓNICA MÓVILES ESPAÑA S.A.U. was fined by the AEPD 1,000 EUR for sending unsolicited commercial SMS messages to a customer. The recipient had previously requested to opt out of such communications, but the messages continued.ESAEPDePrivacy€1,000
14 Nov 2014Geniki TrapezaThe bank failed to ensure the accuracy of personal data and did not respond adequately to a data access request. The case concerns breaches of data quality obligations and the handling of data subject rights.GRHDPAGDPR€30,000
13 Nov 2014GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD 20,000 EUR for continuing to send commercial emails after the user requested deletion of personal data and opted out of communications. The case indicates a failure to respect the data subject’s withdrawal of consent and request to stop marketing processing.ESAEPDePrivacy€20,000
12 Nov 2014Sergio FioreseSergio Fiorese was fined EUR 2,400 by the Garante for failing to provide data subjects with the required information about the processing of personal data. The breach concerned a video surveillance system at the association “Sottosopra”.ITGaranteGDPR€2,400
12 Nov 2014Ruggiero FerdinandoRuggiero Ferdinando was fined EUR 10,000 by the Garante. The sanction concerned failing to provide a complete response to a request for information during a privacy investigation.ITGaranteGDPR€10,000
12 Nov 2014Yueming LiYueming Li was fined EUR 2,400 by the Italian data protection authority, Garante. The case concerned a failure to provide data subjects with the required information about the processing of personal data through a video surveillance system at Sala VLT Video Lottery 999 in Milan.ITGaranteGDPR€2,400
12 Nov 2014Areacom s.r.l.Areacom s.r.l. was fined by the Garante 16,000 EUR for collecting personal data through its website without providing the required privacy notice. The breach concerned Article 13 of the Italian Data Protection Code.ITGaranteGDPR€16,000
12 Nov 2014One Italia s.r.l.One Italia s.r.l. was fined €200,000 by the Garante for sending unsolicited promotional messages related to a value-added service. The authority found that proper consent and adequate information were not obtained, in breach of data protection rules.ITGaranteGDPR€200,000
12 Nov 2014Associazione sportiva dilettantistica Sport Fashion (A.S.D. Sport Fashion)The sports association was fined by the Garante 10,000 EUR for processing clients' biometric data without the required information and consent. The authority found this to be a breach of privacy rules.ITGaranteGDPR€10,000
12 Nov 2014Paolo DorelliPaolo Dorelli was fined by the Garante EUR 2,400 for failing to provide the required information to data subjects regarding video surveillance at a public establishment. This constituted a breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
07 Nov 2014MASTOCADOS S.L.MASTOCADOS S.L. was fined by the AEPD 7,400 EUR for sending unauthorized commercial emails to individuals without a prior contractual relationship. The conduct breached Article 21 of the LSSI on electronic marketing communications.ESAEPDePrivacy€7,400
06 Nov 2014Dragica LjubojevicDragica Ljubojevic was fined by the Garante in the amount of 2,400 EUR for failing to provide data subjects with the required information about the processing of personal data. The case concerned a video surveillance system at a private club.ITGaranteGDPR€2,400
06 Nov 2014Comune di VeronellaComune di Veronella was fined by the Garante for unlawfully publishing personal data on its online notice board for longer than the legally permitted 15 days. This constituted a breach of data protection rules.ITGaranteGDPR€4,000
06 Nov 2014Comune di GerenzanoThe Municipality of Gerenzano was fined 4,000 EUR by the Garante for failing to appoint a socially useful worker as a data processor. The authority found this breached the minimum security measures required under the data protection code.ITGaranteGDPR€4,000
06 Nov 2014Fengfeng WuFengfeng Wu was fined by the Garante in the amount of EUR 2,400 for failing to provide data subjects with the required information about the processing of personal data through a video surveillance system at Bar Wu Fengfeng in Milan. The case concerns a breach of transparency and information obligations linked to CCTV processing.ITGaranteGDPR€2,400