BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2024 | TELEFÓNICA MÓVILES ESPAÑA, S.A.TELEFÓNICA MÓVILES ESPAÑA, S.A. was fined by the AEPD for issuing a duplicate SIM card without proper consent or identity verification. The failure enabled identity theft and fraudulent transactions. | ES | AEPD | GDPR | €300,000 | ↗ |
| 17 Mar 2023 | TELEFÓNICA MÓVILES ESPAÑA, S.A.The AEPD fined TELEFÓNICA MÓVILES ESPAÑA, S.A. 70,000 EUR for changing a customer's mobile tariff without consent. The authority found that the action breached Article 6(1) GDPR because there was no valid legal basis for the change. | ES | AEPD | GDPR | €70,000 | ↗ |
| 29 Oct 2024 | TELEFÓNICA MÓVILES ESPAÑA, S.A.TELEFÓNICA MÓVILES ESPAÑA, S.A. was fined by the AEPD for allowing a SIM card to be duplicated without the customer's consent. The incident led to fraudulent activity on the customer's bank account, indicating serious weaknesses in identity verification and security controls. | ES | AEPD | GDPR | €200,000 | ↗ |
| 01 Jan 2023 | TELEFÓNICA MÓVILES ESPAÑA, S.A.TELEFÓNICA MÓVILES ESPAÑA, S.A. was fined by the AEPD 70,000 EUR for changing the ownership of a mobile line without proper verification. The failure enabled unauthorized access to the complainant’s bank data and fraudulent transactions. | ES | AEPD | GDPR | €70,000 | ↗ |
| 28 Feb 2023 | TELEFÓNICA MÓVILES ESPAÑA, S.A.TELEFÓNICA MÓVILES ESPAÑA, S.A. was fined by the AEPD 70,000 EUR for processing personal data without consent. The case concerned a mobile line contracted in the complainant’s name without proper identity verification. | ES | AEPD | GDPR | €70,000 | ↗ |
| 30 Jul 2010 | TELEFONICA MOVILES ESPAÑA S.A.TELEFONICA MOVILES ESPAÑA S.A. was fined by the AEPD EUR 600 for sending unsolicited commercial messages without prior consent. This constituted a breach of Article 21.1 of the Spanish LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 02 Feb 2011 | TELEFONICA MOVILES ESPAÑA S.A.TELEFONICA MOVILES ESPAÑA S.A. was fined EUR 30,001 by the AEPD for sending unsolicited commercial communications via MMS and SMS. The messages were sent after the complainant had revoked consent, which breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 20 Apr 2016 | TELEFÓNICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined by the AEPD in the amount of 12,000 EUR for continuing to send advertising to a complainant despite repeated requests to stop. The authority found this conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €12,000 | ↗ |
| 17 May 2021 | TELEFÓNICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined by the AEPD for using personal data to contract a service without the data subject’s consent and for listing the complainant in credit information files for a debt that was not recognized. The case concerns processing without a valid legal basis and improper reporting of alleged debt. | ES | AEPD | GDPR | €75,000 | ↗ |
| 16 Jul 2020 | TELEFÓNICA DE ESPAÑA, S.A.U.TELEFÓNICA DE ESPAÑA, S.A.U. was fined EUR 55,000 by the AEPD for processing personal data without consent. The company registered phone lines and charged invoices to an individual who had not authorized these actions. | ES | AEPD | GDPR | €55,000 | ↗ |
| 01 Jan 2015 | TELEFÓNICA DE ESPAÑA S.A.U.TELEFÓNICA DE ESPAÑA S.A.U. was fined by the AEPD EUR 2,900 for sending unsolicited advertising emails. The conduct breached Article 21 of the LSSI, which restricts marketing communications without prior consent. | ES | AEPD | ePrivacy | €2,900 | ↗ |
| 06 Oct 2021 | Telefónica de España, S.A.U.Telefónica de España, S.A.U. was fined by the AEPD EUR 15,000 for sending commercial emails without meeting the requirements of Article 21 of the LSSI. The authority noted that the messages were sent despite the recipient's objection. | ES | AEPD | ePrivacy | €15,000 | ↗ |
| 01 Jan 2019 | TELEFONICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined EUR 30,000 by the AEPD for charging a customer for a phone line they did not own. The authority found a breach of the GDPR data accuracy principle. | ES | AEPD | GDPR | €30,000 | ↗ |
| 13 Aug 2025 | TELECONTACT LIST S.L.TELECONTACT LIST S.L. was fined by the AEPD €1,000 for failing to respond to a data subject’s requests to exercise the rights of access and erasure. The authority found a breach of GDPR obligations, including Article 17. | ES | AEPD | GDPR | €1,000 | ↗ |
| 25 Oct 2025 | TELECONTACT LIST S.L.TELECONTACT LIST S.L. was fined 1,000 EUR by the AEPD for failing to respond to a data subject’s request for access to and deletion of personal data. The authority found a breach of Article 15 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 18 Jan 2018 | Telecom Italia S.p.A.Telecom Italia S.p.A. was fined EUR 840,000 by the Garante for making promotional phone calls to individuals who had not consented to the processing of their data for marketing purposes. The case indicates a breach of lawful processing rules and consent requirements. | IT | Garante | GDPR | €840,000 | ↗ |
| 16 May 2018 | Telecom Italia S.p.A.Telecom Italia S.p.A. was fined by the Garante €800,000 for the unauthorized activation of numerous residential phone lines in a citizen's name. The case involved processing and disclosing personal data without a legal basis, as well as failing to notify data breaches. | IT | Garante | GDPR | €800,000 | ↗ |
| 03 Oct 2013 | Telecom Italia s.p.a.Telecom Italia s.p.a. was fined 80,000 EUR by the Garante for making unsolicited promotional calls to a customer. The calls were made after the customer had withdrawn consent for such communications, which breached data protection rules. | IT | Garante | GDPR | €80,000 | ↗ |
| 18 Apr 2013 | Tel. Com. s.r.l.Tel. Com. s.r.l. was fined EUR 36,000 by the Garante for registering numerous phone cards to unaware third parties. The company failed to provide the required information on data processing, which breached privacy rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 18 Dec 2025 | TELCOM BUSINESS SOLUTIONS S.L.TELCOM BUSINESS SOLUTIONS S.L. was fined by the AEPD for attempting to process live and biometric data without prior consent. After a purchase, users were redirected to a US-based company for identity verification. | ES | AEPD | GDPR | €25,000 | ↗ |