BULLETIN №081Last updated · 27 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 28 Aug 2023 | VOX ESPAÑAVOX ESPAÑA was fined by the AEPD EUR 1,000 for failing to properly sign its surveillance cameras and for capturing an excessive area of public space. The authority found breaches of GDPR data minimisation and transparency obligations. | ES | AEPD | GDPR | €1,000 | ↗ |
| 09 May 2022 | FARMACIA MERCADO CENTRAL DE SAN FERNANDO C.BThe pharmacy was fined by the AEPD for operating a video surveillance system that recorded public areas and conversations between employees and customers. The authority found that this processing breached data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 02 Oct 2025 | RETSINNAL GROUP, S.L.U.RETSINNAL GROUP, S.L.U. was fined 1,000 EUR by the AEPD for deficiencies in its website privacy policy. The authority found that the company did not provide adequate information about the data controller, in breach of Article 13 GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 11 Feb 2021 | Политическа партия „Д.П.Б.“Political party “D.P.B.” was fined 1,000 BGN by CPDP for processing personal data without the consent of the data subjects. The breach occurred during the registration of election commission members and violated Article 6 GDPR. | BG | CPDP | GDPR | €511 | ↗ |
| 30 Jun 2022 | Anonymisé (CNPD decision-14-fr-2022)The company did not provide data subjects with adequate information about video surveillance, breaching GDPR transparency requirements. CNPD found violations of Articles 5, 12, and 13 GDPR and imposed a 1,000 EUR fine. | LU | CNPD | GDPR | €1,000 | ↗ |
| 19 Jan 2015 | SYPNOSIS DISTRIBUCION INTEGRAL, S.A.USYPNOSIS DISTRIBUCION INTEGRAL, S.A.U was fined by the AEPD EUR 1,000 for sending unsolicited promotional emails without the recipient's consent. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 08 Apr 2022 | CARTERA VIVANTA, S.L.U.CARTERA VIVANTA, S.L.U. was fined EUR 1,000 by the AEPD for sending a commercial SMS to an individual who had already exercised the right to erasure. The authority found this conduct to be a breach of data protection rules. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jan 2018 | PROSAD CONSULTORES, S.L.PROSAD CONSULTORES, S.L. was fined by the AEPD in the amount of 1,000 EUR for sending unsolicited promotional emails without prior consent. The conduct breached Article 21.1 of the LSSI on electronic commercial communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 02 Feb 2024 | SIA "AQUAPHOTO"DVI imposed a fine of 1,000 EUR on SIA "AQUAPHOTO". The decision has been appealed to court. | LV | DVI | GDPR | €1,000 | ↗ |
| 20 Dec 2024 | English Home SRLEnglish Home SRL was fined EUR 1,000 by ANSPDCP for violating Article 21 of the GDPR. The case concerned failure to respect the data subject’s right to object to processing. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 06 Jul 2023 | SUROVI (Surovi Ristorante indiano e kebab di Chowdhury Monika)The Garante fined SUROVI restaurant EUR 1,000 for operating a video surveillance system without the required privacy notice. The authority found this to be a breach of Article 13 of the GDPR. | IT | Garante | GDPR | €1,000 | ↗ |
| 04 Dec 2025 | Istituto Comprensivo di Roverbella (Mantova)Istituto Comprensivo di Roverbella was fined EUR 1,000 by the Garante for breaches of data protection rules. The authority cited non-compliance with the principles of lawfulness, fairness, and transparency in data processing. | IT | Garante | GDPR | €1,000 | ↗ |
| 21 Jun 2023 | Vodafone România SAVodafone România SA was fined €1,000 by ANSPDCP. The authority found that the company violated the complainant’s right of access by refusing to provide certain call center recordings. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 11 Oct 2023 | COM. PROP. ***COMUNIDAD.1The entity installed surveillance cameras oriented toward public roads without prior administrative authorization. This breached data protection rules and resulted in a fine by the AEPD. | ES | AEPD | GDPR | €1,000 | ↗ |
| 23 Dec 2020 | Anonymizováno (ÚOOÚ UOOU-02528/20-14)The entity was fined by the UOOU for breaching a legal prohibition on disclosing personal data under another regulation. The case concerned information about criminal proceedings and the persons involved. | CZ | UOOU | GDPR | €38 | ↗ |
| 24 Mar 2025 | DINAMO SAN JUAN, C.F.DINAMO SAN JUAN, C.F. was fined by the AEPD for processing personal data without a legal basis. The case concerned the failure to effectively remove images of minors from social media after a parent requested deletion. | ES | AEPD | GDPR | €1,000 | ↗ |
| 25 Oct 2024 | IA BILET SRLThe operator was fined EUR 1,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 10 Jan 2026 | NAROBESA INV, S.L.NAROBESA INV, S.L. was fined 1,000 EUR by the AEPD for unlawfully accessing a job applicant's credit information without consent during recruitment. The conduct breached data protection rules and occurred in the hiring process. | ES | AEPD | GDPR | €1,000 | ↗ |
| 16 Mar 2023 | Sancțiuni pentru încălcarea RGPDA healthcare operator was fined for unauthorized disclosure and access to personal data. The case concerned data confidentiality and breaches of GDPR obligations. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 01 Jan 2014 | ESTABLIMENTS MIRÓ, S.L.ESTABLIMENTS MIRÓ, S.L. was fined by the AEPD EUR 1,000 for sending unauthorized advertising text messages to the complainant's mobile phone. The messages were sent after the data subject had requested cancellation of their data. | ES | AEPD | ePrivacy | €1,000 | ↗ |