Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
10 Jan 2020AUTOMOCION X.X.X. S.L.The company was fined EUR 1,000 by the AEPD for placing an individual's photo, name, and phone number on an adult contact website without consent. The disclosure led to unwanted calls and constituted a breach of personal data protection rules.ESAEPDGDPR€1,000
29 Oct 2024AUTOMOCIÓN 1972, S.L.AUTOMOCIÓN 1972, S.L. was fined by the AEPD in the amount of 2,000 EUR for failing to comply with a data access request. The authority found a breach of GDPR obligations.ESAEPDGDPR€2,000
12 Mar 2025Automobilus International S.R.L.The company was fined for failing to implement appropriate technical and organizational measures to ensure an adequate level of security. The authority found this to be a breach of Article 32 of the GDPR.ROANSPDCPGDPR€5,000
01 Feb 2025Automobilus International S.R.L.The Romanian data protection authority fined Automobilus International S.R.L. 24,885 RON after concluding its investigation in February 2025. It found breaches of GDPR Articles 32(1) and 32(2) due to inadequate technical and organizational security measures following a personal data breach.ROAutoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter PersonalGDPR€5,000
18 May 2023AUTOMOBILE BAVARIA SRLThe fine was imposed for the unauthorized disclosure of personal data of 290 clients and potential clients, which were publicly accessible on the operator's website. The case concerns a breach of data protection rules through disclosure without an appropriate legal basis or safeguards.ROANSPDCPGDPR€18,000
31 May 2021AUTOMECANICA JÉREZ, S.L.AUTOMECANICA JÉREZ, S.L. was fined EUR 4,000 by the AEPD. The authority found that the company sent a mass email without masking personal data and sent commercial emails and SMS messages without consent.ESAEPDePrivacy€4,000
28 Jul 2022Auto Hi-Fi System S.n.cAuto Hi-Fi System S.n.c was fined EUR 2,000 by the Garante. The surveillance camera captured public areas and private property without proper notice, breaching data protection principles.ITGaranteGDPR€2,000
09 Aug 2023AUTOFER, S.L.AUTOFER, S.L. was fined EUR 10,000 by the AEPD for sending multiple unsolicited advertising SMS messages. The messages were sent despite the recipient’s prior request not to receive further communications, breaching Article 21 of the LSSI.ESAEPDePrivacy€10,000
23 Oct 2013AUTOESCUELA XXXXXXAUTOESCUELA XXXXXX was fined by the AEPD for sending unsolicited commercial emails without providing a simple and free way to object. The authority found a breach of Article 21.2 of the LSSI.ESAEPDePrivacy€600
18 Mar 2025AUTOESCUELA A.A.A.The AEPD imposed a EUR 500 fine on AUTOESCUELA A.A.A. for failing to respond to a data subject's request for access to and deletion of personal data. The authority also found that the company did not provide the required signage for its video surveillance system, breaching GDPR information duties.ESAEPDGDPR€500
04 Jun 2020AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules.ESAEPDGDPR€1,500
01 Jan 2016AUTOCLUB MUTUA MADRILEÑA S.L.AUTOCLUB MUTUA MADRILEÑA S.L. was fined by the AEPD 5,000 EUR for sending an unsolicited commercial SMS without prior consent. The authority also found that no opt-out mechanism was provided, in breach of Article 21 of the LSSI.ESAEPDePrivacy€5,000
14 Sept 2023AUTOCINES 2015, S.L.AUTOCINES 2015, S.L. was fined by the AEPD 5,000 EUR for posting a child’s photo on social media without parental consent. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€5,000
04 Aug 2022AUTOBIZ, S.A. SUCURSAL EN ESPAÑAAUTOBIZ, S.A. Sucursal en España was fined by the AEPD €800 for sending unsolicited marketing messages. The authority also found that the company failed to provide a functional opt-out mechanism, breaching Article 21 of the LSSI.ESAEPDePrivacy€800
12 May 2016Auto 2000 s.p.a.Auto 2000 s.p.a. was fined by the Garante for collecting personal data through its website without providing users with the required information notice. The authority found this to be a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
12 May 2016Auto 2000 s.p.a.Auto 2000 s.p.a. was fined by the Garante for collecting personal data through its website without providing users with the required information notice. The case concerned a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
01 Jun 2023AUSL Toscana Sud EstThe Garante fined AUSL Toscana Sud Est 20,000 EUR for the unlawful dissemination of a patient's health data. The authority found a breach of data protection principles.ITGaranteGDPR€20,000
17 Apr 2026Ausl ModenaAusl Modena was fined by the Garante in the amount of 3,500 EUR for creating duplicate patient records. The case involved processing health data without proper transparency and compliance with data protection rules.ITGaranteGDPR€3,500
24 Nov 2016Aurora Jonica soc. coop.Aurora Jonica soc. coop. was fined by the Garante 10,000 EUR for making an unsolicited promotional call. The phone number was registered in the public opt-out list, which breached data protection rules.ITGaranteGDPR€10,000
10 Sept 2015Aurelia ZanniAurelia Zanni was fined EUR 2,400 by the Garante for failing to provide an adequate simplified privacy notice. The case concerned its “compro oro” business and non-compliance with the Italian Data Protection Code and the 2010 video surveillance guidelines.ITGaranteGDPR€2,400