Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.5m
YoY volume
-23.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
09 Jun 2011GREEN TAL, S.A.GREEN TAL, S.A. was fined by the AEPD in the amount of EUR 1,200 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which restricts marketing communications without prior consent.ESAEPDePrivacy€1,200
30 May 2011CABLEUROPA, S.A.U.CABLEUROPA, S.A.U. was fined EUR 600 by the AEPD for continuing to send advertising communications to an individual after repeated requests for data cancellation. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€600
26 May 2011Eredi Trossello dei Fratelli Trossello C.A.R. s.n.c.The company was fined EUR 10,000 by the Garante for operating a video surveillance system without the required privacy notice. The authority found a breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€10,000
26 May 2011DVDR.it s.r.l.DVDR.it s.r.l. was fined EUR 7,000 by the Garante. The authority found that the company sent unsolicited commercial emails without consent, in breach of data protection rules.ITGaranteGDPR€7,000
19 May 2011Limbiati oreficeria orologeria ottica s.n.c. di L. Limbiati & C.Limbiati oreficeria orologeria ottica s.n.c. was fined by the Garante for collecting personal data through its website without providing adequate information or obtaining the required consent. The authority found this to be a breach of the Italian Privacy Code.ITGaranteGDPR€9,000
19 May 2011Anonymised (HDPA 59/2011)The company was fined for sending unsolicited electronic messages and faxes without subscriber consent. This conduct breached e-privacy rules governing direct electronic communications.GRHDPAePrivacy€2,000
19 May 2011Anonymised (HDPA 59/2011)The company was fined for unlawfully processing email addresses without prior consent. The authority found this to be a breach of data protection law.GRHDPAGDPR€2,000
17 May 2011LA CIGUEÑA DEL BEBE, S.L.LA CIGUEÑA DEL BEBE, S.L. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial emails without recipient consent. The case concerned Article 21.1 of the LSSI, which governs electronic marketing communications.ESAEPDePrivacy€1,800
12 May 2011Jnternet srlJnternet srl was fined by the Italian data protection authority, Garante, in the amount of EUR 10,000. The case concerned the failure to respond to requests for information about compliance with data protection obligations in connection with promotional emails sent without proper consent.ITGaranteGDPR€10,000
12 May 2011Centrale Palace HotelCentrale Palace Hotel was fined EUR 6,000 by the Garante. The violation concerned the failure to provide the required privacy notice for its video surveillance system, in breach of the Italian data protection code.ITGaranteGDPR€6,000
05 May 2011Idrablu SpaIdrablu Spa was fined by the Garante in the amount of EUR 20,000 for failing to respond to requests for information about the transfer of personal data to another company. The authority treated this as a breach of data protection rules.ITGaranteGDPR€20,000
05 May 2011Mondolibri s.p.a.Mondolibri s.p.a. was fined EUR 8,000 by the Garante for collecting personal email addresses through its website without providing adequate information to the data subjects. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€8,000
27 Apr 2011Iniziative immobiliari s.p.a.Iniziative immobiliari s.p.a. was fined 20,000 EUR by the Garante. The authority found that the company collected personal data through a website form without providing adequate information and failed to appoint data processing personnel or implement minimum security measures.ITGaranteGDPR€20,000
27 Apr 2011Comune di AdroThe Municipality of Adro was fined 15,000 EUR by the Italian supervisory authority Garante. The case concerned the publication of employees’ personal data, including health information, in a periodical.ITGaranteGDPR€15,000
26 Apr 2011VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined 600 EUR by the AEPD for sending unsolicited advertising SMS messages. The authority found that the messages were sent despite the recipient’s opt-out request, which breached Article 21.2 of the LSSI.ESAEPDePrivacy€600
21 Apr 2011Azienda Trasporti per l'Area Metropolitana S.p.A.Azienda Trasporti per l'Area Metropolitana S.p.A. was fined by the Garante €10,000 for failing to provide adequate data protection information on its website. The conduct breached Article 13 of the Italian Data Protection Code.ITGaranteGDPR€10,000
21 Apr 2011Azienda USL della Valle D'AostaAzienda USL della Valle D'Aosta was fined for processing personal data during phone bookings without providing the required information notice and for failing to update the security program document. The authority found these actions breached data protection rules.ITGaranteGDPR€20,000
14 Apr 2011Mansutti S.p.A.Mansutti S.p.A. was fined EUR 12,000 by the Garante for failing to provide the required data protection notice on its website forms. The breach concerned Article 13 of the Italian Data Protection Code.ITGaranteGDPR€12,000
14 Apr 2011Trentino Trasporti Esercizio S.p.A.Trentino Trasporti Esercizio S.p.A. was fined by the Garante 25,000 EUR for collecting personal data through web forms without providing the required privacy notice. This constituted a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€25,000
07 Apr 2011Enterprise Service s.r.l.Enterprise Service s.r.l. was fined EUR 6,000 by the Garante for sending unsolicited promotional faxes without prior explicit consent from recipients. The authority also found that the required privacy notice was not provided, constituting a breach of privacy rules.ITGaranteGDPR€6,000