Order report
BULLETIN №083Last updated · 11 Aug 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
14 Dec 2022ODRIA COSTAS INTERNACIONAL, S.L.ODRIA COSTAS INTERNACIONAL, S.L. was fined EUR 10,000 by the AEPD for publishing images of minors without consent on a real estate website. The authority found this to be a breach of data protection rules.ESAEPDGDPR€10,000↗
25 Jun 2024RIVENDELL TECHNOLOGY, S.L.RIVENDELL TECHNOLOGY, S.L. failed to properly handle a data subject access request, which constitutes a breach of Article 15 GDPR. The company was fined for not complying with the data protection authority's resolution.ESAEPDGDPR€900↗
22 Jun 2023COLEGIO VIRGEN DE EUROPA, S.L.The school processed and published images of a 3-year-old child on Facebook and WhatsApp without parental consent. This disregarded the parents’ explicit refusal and led to a fine imposed by the AEPD.ESAEPDGDPR€15,000↗
05 May 2026VOX ESPAÑAVOX ESPAÑA was fined by the AEPD 500 EUR for publishing personal data on Facebook without proper consent. The authority found that this breached Article 6 of the GDPR.ESAEPDGDPR€500↗
05 Jul 2021FUTURE VINLINE SLFUTURE VINLINE SL was fined by the AEPD EUR 10,000 for not having an adequate privacy policy on its website. The authority found that the company failed to provide clear and complete information about data processing under Article 13 GDPR.ESAEPDGDPR€10,000↗
21 Sept 2020AVATA HISPANIA, S.L.AVATA HISPANIA, S.L. was fined by the AEPD 5,000 EUR for using personal data after the contract had ended. The company acted as a data processor, and continued use of the data was inconsistent with its obligations in that role.ESAEPDGDPR€5,000↗
03 Jun 2013BBVA SERVICIOS, S.A.BBVA SERVICIOS, S.A. was fined by the AEPD EUR 30,001 for sending unsolicited commercial emails without prior consent. This conduct breached Article 21.1 of the LSSI.ESAEPDePrivacy€30,001↗
20 Feb 2025BLUE TEAM FLIGHT SCHOOL, S.L.BLUE TEAM FLIGHT SCHOOL, S.L. was fined 6,000 EUR by the AEPD. The authority found that the company failed to provide access to personal data and information requested by the data protection authority, in breach of Article 58.1 of the GDPR.ESAEPDGDPR€6,000↗
19 May 2022B.B.B.B.B.B. was fined EUR 600 by the AEPD. The authority found that the video surveillance cameras were improperly oriented, capturing public areas and private property, and that adequate information on data processing responsibilities was not provided.ESAEPDGDPR€600↗
30 Mar 2021PROMOTECH DIGITAL, S.L.PROMOTECH DIGITAL, S.L. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited SMS messages without recipient consent. The authority also found that the company did not provide an easy opt-out mechanism, in breach of data protection rules.ESAEPDGDPR€5,000↗
14 May 2010ANUNTIS SEGUNDAMANO ESPAÑA S.L.UANUNTIS SEGUNDAMANO ESPAÑA S.L.U was fined by the AEPD EUR 600 for sending unsolicited commercial communications without proper consent. The conduct breached Article 21 of the LSSI.ESAEPDePrivacy€600↗
01 Jan 2014G.L. GISOFT ANALISIS Y DISEÑO S.L.G.L. GISOFT ANALISIS Y DISEÑO S.L. was fined by the AEPD €1,800 for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications.ESAEPDePrivacy€1,800↗
08 Jun 2020G.L.P. Instalaciones 86, S.L.G.L.P. Instalaciones 86, S.L. was fined by the AEPD EUR 60,000 for processing personal data without a legal basis. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€60,000↗
14 Mar 2013PONTE EN FORMA ONLINE, S.L.PONTE EN FORMA ONLINE, S.L. was fined by the AEPD EUR 50,000 for sending unsolicited commercial email communications. The conduct breached Article 21 of the LSSI, which restricts marketing emails sent without prior consent.ESAEPDePrivacy€50,000↗
29 Apr 2022TECH EDUCATION, RIGHTS & TECHNOLOGIES, S.L.TECH EDUCATION, RIGHTS & TECHNOLOGIES, S.L. was fined by the AEPD 1,500 EUR for sending unsolicited commercial communications after the complainant's data had been deleted. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€1,500↗
20 Oct 2015AEROCLUB DEL SOLAEROCLUB DEL SOL was fined EUR 600 by the AEPD for sending unsolicited emails advertising airplane insurance. The authority found this breached Article 21.1 of the LSSI on commercial communications without prior consent.ESAEPDePrivacy€600↗
01 Jan 2025PROYECTOS VISUALES ZARAGOZA SLPROYECTOS VISUALES ZARAGOZA SL was fined by the AEPD 50,000 EUR for a personal data breach. The authority found that the company failed to ensure data integrity and confidentiality under Article 5(1)(f) GDPR.ESAEPDGDPR€50,000↗
01 Jan 2024DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 130,000 EUR for unauthorized SIM card duplication. The incident led to identity theft and fraudulent charges, and the authority found the data protection measures insufficient.ESAEPDGDPR€130,000↗
28 Jul 2025KINYO, S.L.KINYO, S.L. was fined by the AEPD in the amount of 15,000 EUR for sending unsolicited commercial emails. The authority also found that recipients were not provided with an effective mechanism to opt out of future communications.ESAEPDePrivacy€15,000↗
11 Mar 2025LÁSER METALPRINT 3D, S.L.LÁSER METALPRINT 3D, S.L. was fined by the AEPD 10,000 EUR for deploying a video surveillance system without proper data processing agreements. The authority found a breach of GDPR Article 28.ESAEPDGDPR€10,000↗