BULLETIN №081Last updated · 27 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 14 Sept 2023 | AUTOCINES 2015, S.L.AUTOCINES 2015, S.L. was fined by the AEPD 5,000 EUR for posting a child’s photo on social media without parental consent. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2016 | AUTOCLUB MUTUA MADRILEÑA S.L.AUTOCLUB MUTUA MADRILEÑA S.L. was fined by the AEPD 5,000 EUR for sending an unsolicited commercial SMS without prior consent. The authority also found that no opt-out mechanism was provided, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 04 Jun 2020 | AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 18 Mar 2025 | AUTOESCUELA A.A.A.The AEPD imposed a EUR 500 fine on AUTOESCUELA A.A.A. for failing to respond to a data subject's request for access to and deletion of personal data. The authority also found that the company did not provide the required signage for its video surveillance system, breaching GDPR information duties. | ES | AEPD | GDPR | €500 | ↗ |
| 23 Oct 2013 | AUTOESCUELA XXXXXXAUTOESCUELA XXXXXX was fined by the AEPD for sending unsolicited commercial emails without providing a simple and free way to object. The authority found a breach of Article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 09 Aug 2023 | AUTOFER, S.L.AUTOFER, S.L. was fined EUR 10,000 by the AEPD for sending multiple unsolicited advertising SMS messages. The messages were sent despite the recipient’s prior request not to receive further communications, breaching Article 21 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 28 Jul 2022 | Auto Hi-Fi System S.n.cAuto Hi-Fi System S.n.c was fined EUR 2,000 by the Garante. The surveillance camera captured public areas and private property without proper notice, breaching data protection principles. | IT | Garante | GDPR | €2,000 | ↗ |
| 31 May 2021 | AUTOMECANICA JÉREZ, S.L.AUTOMECANICA JÉREZ, S.L. was fined EUR 4,000 by the AEPD. The authority found that the company sent a mass email without masking personal data and sent commercial emails and SMS messages without consent. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 18 May 2023 | AUTOMOBILE BAVARIA SRLThe fine was imposed for the unauthorized disclosure of personal data of 290 clients and potential clients, which were publicly accessible on the operator's website. The case concerns a breach of data protection rules through disclosure without an appropriate legal basis or safeguards. | RO | ANSPDCP | GDPR | €18,000 | ↗ |
| 12 Mar 2025 | Automobilus International S.R.L.The company was fined for failing to implement appropriate technical and organizational measures to ensure an adequate level of security. The authority found this to be a breach of Article 32 of the GDPR. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 01 Feb 2025 | Automobilus International S.R.L.The Romanian data protection authority fined Automobilus International S.R.L. 24,885 RON after concluding its investigation in February 2025. It found breaches of GDPR Articles 32(1) and 32(2) due to inadequate technical and organizational security measures following a personal data breach. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €5,000 | ↗ |
| 29 Oct 2024 | AUTOMOCIÓN 1972, S.L.AUTOMOCIÓN 1972, S.L. was fined by the AEPD in the amount of 2,000 EUR for failing to comply with a data access request. The authority found a breach of GDPR obligations. | ES | AEPD | GDPR | €2,000 | ↗ |
| 10 Jan 2020 | AUTOMOCION X.X.X. S.L.The company was fined EUR 1,000 by the AEPD for placing an individual's photo, name, and phone number on an adult contact website without consent. The disclosure led to unwanted calls and constituted a breach of personal data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 03 Mar 2022 | AUTOMOVILES FERSAN, S.A.AUTOMOVILES FERSAN, S.A. used personal data without consent to include it in a vehicle purchase contract. The AEPD imposed a fine of EUR 5,000 for breaching data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 15 Feb 2018 | AUTONOLEGGI 24 S.a.s. DI GIAQUINTO GIOVANNIAUTONOLEGGI 24 S.a.s. was fined by the Garante for processing personal data through a geolocation system without the required notification. The case concerned breaches of notification and supervisory obligations linked to that processing. | IT | Garante | GDPR | €20,000 | ↗ |
| 01 Jan 2016 | AUTO OJA S.A.AUTO OJA S.A. was fined by the AEPD 10,000 EUR for sending unsolicited promotional emails to a customer. The company continued contacting the recipient despite requests to be removed from the mailing list, which breached the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2016 | AUTOPRIN, S.A.AUTOPRIN, S.A. was fined by the AEPD in the amount of 1,000 EUR for sending unsolicited commercial emails despite requests to stop. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 20 Dec 2022 | Autoritatea Națională pentru Restituirea Proprietăților (ANRP)The National Authority for Property Restitution (ANRP) was fined 13,000 RON by ANSPDCP for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,646 | ↗ |
| 31 May 2018 | Autosat S.p.A.Autosat S.p.A. was fined by the Italian Garante in the amount of EUR 30,000 for breaches of data protection rules. The case concerned the handling of personal data and the security measures used in the company’s IT systems. | IT | Garante | GDPR | €30,000 | ↗ |
| 21 May 2025 | Autostrade per l'Italia SpaThe Italian data protection authority fined Autostrade per l'Italia Spa EUR 420,000 for unlawfully processing an employee's personal data. The company used content from her Facebook profile and private Messenger and WhatsApp chats to support disciplinary proceedings and justify her dismissal. | IT | Garante per la protezione dei dati personali | GDPR | €420,000 | ↗ |