BULLETIN №083Last updated · 10 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2016 | BANCO SANTANDER, S.A.Banco Santander, S.A. was fined by the AEPD €8,000 for sending unsolicited commercial emails. The authority found that the messages did not provide a valid email address for recipients to opt out, breaching Article 21 of the LSSI. | ES | AEPD | ePrivacy | €8,000 | ↗ |
| 18 Mar 2025 | ALVEA SOLUCIONES TECNOLÓGICAS, S.L.ALVEA Soluciones Tecnológicas, S.L. was fined 35,000 EUR by the AEPD for improper handling of personal data. The authority cited sharing data without consent and failing to comply with data retention policies. | ES | AEPD | GDPR | €35,000 | ↗ |
| 25 Aug 2022 | B.B.B.A lawyer sent personal data without authorization via WhatsApp for professional promotion. The AEPD found a breach of GDPR Articles 6 and 5(1)(f) and imposed a fine of 4,000 EUR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 25 Oct 2016 | CEPSA COMERCIAL PETROLEO, SAUCEPSA COMERCIAL PETROLEO, SAU was fined by the AEPD in the amount of 5,700 EUR. The sanction concerned the sending of unauthorized commercial emails in breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,700 | ↗ |
| 28 Oct 2024 | HSSERVICE LIZCON SOLUTIONS, S.L.HSSERVICE LIZCON SOLUTIONS, S.L. was fined by the AEPD for failing to comply with data protection rules. The authority cited non-compliance with measures required under Article 58(2) GDPR. | ES | AEPD | GDPR | €15,000 | ↗ |
| 18 Jul 2025 | LEIVA BUS, S.L.LEIVA BUS, S.L. was fined by the AEPD 3,000 EUR for disclosing the personal data of a claimant and a third party in a damage assessment document. The case concerned a breach of data protection rules and unauthorized disclosure of information. | ES | AEPD | GDPR | €3,000 | ↗ |
| 13 Oct 2023 | COMUNIDAD DE PROPIETARIOS ***COMUNIDAD.1The entity installed a video surveillance system with cameras directed toward public areas without prior administrative authorization. In addition, unauthorized personnel had access to the system, creating a data protection compliance breach. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2012 | IBEREXPERT GRUPO CONSULTOR INFORMATICO, S.L.IBEREXPERT GRUPO CONSULTOR INFORMATICO, S.L. was fined by the AEPD in the amount of 6,000 EUR for sending unsolicited commercial communications after a request to stop. The conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €6,000 | ↗ |
| 01 Jan 2019 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined 50,000 EUR by the AEPD. The authority found that the company used personal data to fraudulently contract phone lines without the data subjects’ consent. | ES | AEPD | GDPR | €50,000 | ↗ |
| 19 Sept 2016 | CONVERSALES INNOVA, S.L.CONVERSALES INNOVA, S.L. was fined by the AEPD €3,000 for sending unsolicited commercial emails without prior consent from recipients. This conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 01 Jan 2013 | GRUPO FIDES 21 FORMACION, S.L.GRUPO FIDES 21 FORMACION, S.L. was fined EUR 1,200 by the AEPD for sending unsolicited commercial emails. The case concerned a breach of Article 21 of the LSSI, which prohibits such messages without prior consent. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 01 Jan 2013 | SEARCH TASK, S.L.U.SEARCH TASK, S.L.U. was fined by the AEPD EUR 30,001 for sending commercial emails without prior consent from recipients. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 01 Jan 2016 | TELE PIZZA S.A.U.TELE PIZZA S.A.U. was fined EUR 2,500 by the AEPD for sending commercial emails without providing a valid electronic address for exercising ARCO rights. This breached Article 21.2 of the LSSI and indicates a failure to meet required recipient information obligations. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 02 Jul 2010 | ANTENA 3 DE TELEVISIÓN S.A.ANTENA 3 DE TELEVISIÓN S.A. was fined by the AEPD in the amount of 1,000 EUR for sending commercial SMS messages without prior recipient consent. The case concerns a breach of direct marketing rules and consent requirements for electronic communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jan 2023 | ENERGÍA COLECTIVA, S.L.ENERGÍA COLECTIVA, S.L. was fined by the AEPD for inaccurately processing personal data. The issue led to incorrect billing and an intrusion into individuals’ privacy. | ES | AEPD | GDPR | €70,000 | ↗ |
| 03 Nov 2022 | FINCAS MARTIN 2, S.L.FINCAS MARTIN 2, S.L. was fined by the AEPD 5,000 EUR for failing to provide the information required under Article 13 GDPR when collecting personal data through a website contact form. The authority found that users were not properly informed about the processing of their data at the time of collection. | ES | AEPD | GDPR | €5,000 | ↗ |
| 11 Jun 2020 | XFERA MÓVILES, S.A. (YOIGO)XFERA MÓVILES, S.A. (YOIGO) was fined EUR 55,000 by the AEPD for linking a phone number to a third party’s data. This created unauthorized access and a risk of data alteration, breaching data protection rules. | ES | AEPD | GDPR | €55,000 | ↗ |
| 09 Jun 2021 | INMOPISO ZARAGOZA, S.L.INMOPISO ZARAGOZA, S.L. was fined EUR 2,000 by the AEPD for failing to provide data protection information to a customer who made a deposit for a property purchase. The case concerns a breach of the transparency and information duty owed to the data subject. | ES | AEPD | GDPR | €2,000 | ↗ |
| 24 Jan 2024 | CAJA RURAL DE GIJÓN, S.C.A.C.CAJA RURAL DE GIJÓN was fined by the AEPD 95,000 EUR for breaching data protection principles, specifically confidentiality and integrity. The incident resulted in unauthorized access to personal data and indicates a significant compliance failure. | ES | AEPD | GDPR | €95,000 | ↗ |
| 01 Jan 2015 | JAZZ TELECOM, SAUJAZZ TELECOM, SAU was fined by the AEPD in the amount of 7,400 EUR for sending unsolicited commercial emails to a complainant. The conduct occurred after the cancellation of the complainant’s personal data had been confirmed and breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €7,400 | ↗ |