BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Apr 2024 | Centrul Medical dr. Furtună DanThe National Supervisory Authority for Personal Data Processing imposed a fine on Centrul Medical dr. Furtună Dan for breaching Article 6 of the GDPR. The infringement concerned the absence of a proper legal basis for personal data processing. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 17 Jan 2023 | B.B.B.The entity installed surveillance cameras in the common areas of a residential community without proper authorization or the required informational signage. AEPD found a breach of GDPR Articles 6 and 13 and imposed a EUR 1,500 fine. | ES | AEPD | GDPR | €1,500 | ↗ |
| 20 Nov 2023 | Libra Internet Bank SALibra Internet Bank SA was fined EUR 1,500 by ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 01 Jan 2024 | CIBERSEO JAÉN, S.L.CIBERSEO JAÉN, S.L. was fined EUR 1,500 by the AEPD for publishing a photograph of an individual without consent on a job search website. The case concerned processing personal data without a lawful basis, contrary to Article 6 of the GDPR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 13 Nov 2021 | IMPERIUM C.B.IMPERIUM C.B. was fined by the AEPD in the amount of 1,500 EUR for failing to provide informational signage about its video surveillance system. The authority found a breach of Article 13 GDPR because individuals on the premises were not given the required notice. | ES | AEPD | GDPR | €1,500 | ↗ |
| 12 May 2023 | Noi sancțiuniA company in the insurance sector was fined by ANSPDCP in the amount of 1,500 EUR for violating GDPR Article 5. The case concerned non-compliance with the basic principles for processing personal data. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 06 Apr 2023 | К. Л. НK. L. N was fined for unlawfully processing voters' personal data. The case involved forwarding an email containing scanned voting lists to a personal email address, in breach of GDPR Article 6. | BG | CPDP | GDPR | €767 | ↗ |
| 09 Sept 2022 | COMUNIDAD PROPIETARIO R.R.R.The entity installed a video surveillance system without approval from the property owners' association. The authority found this to be a breach of data protection rules and imposed a fine of 1,500 EUR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 05 Jun 2020 | BUBO MEDIA, S.L.BUBO MEDIA, S.L. was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited SMS messages to individuals without their consent. The conduct breached data protection and electronic communications rules. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 12 Apr 2021 | COMUNIDAD DE PROPIETARIOS R.R.R.The entity was fined by the AEPD EUR 1,500 for installing a video surveillance system without the required authorization from the homeowners' association. The case concerned a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2015 | INSTITUTO SUPERIOR DE ESTUDIOS EMPRESARIALES CAMBRIDGE S.A.The entity was fined by the AEPD 1,500 EUR for sending commercial messages without providing recipients a way to oppose further communications. The authority treated this as a breach of the right to data cancellation and control over continued contact. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 30 Jul 2014 | ORANGE ESPAGNE S.A.U.ORANGE ESPAGNE S.A.U. was fined by the AEPD EUR 1,500 for sending unsolicited commercial SMS messages. The recipient had previously requested removal from the advertising list, and the conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 26 Aug 2021 | B.B.B.The entity was fined by the AEPD in the amount of EUR 1,500 for installing surveillance cameras that excessively recorded private areas of third parties. The authority found this to be a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |
| 22 Feb 2021 | B.B.B.A fine was imposed for installing a surveillance camera aimed at public and private spaces without justification. The authority found a breach of data protection principles. | ES | AEPD | GDPR | €1,500 | ↗ |
| 02 Mar 2023 | WILLOUGHBY COLLEGE, S.A.WILLOUGHBY COLLEGE, S.A. failed to provide requested information to the Spanish Data Protection Agency, which constituted a breach of Article 58.1 of the GDPR. A fine was imposed and reduced due to early payment and acknowledgment of responsibility. | ES | AEPD | GDPR | €1,500 | ↗ |
| 04 Jun 2020 | AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 31 Mar 2022 | Anonymised (CyDPC Απόφαση για λειτουργία ΚΚΒΠ.pd)The case concerned the unlawful installation and operation of a CCTV system in a shared waiting area of a pediatric and dental clinic. A fine of EUR 1,500 was imposed for failure to cooperate with the supervisory authority under GDPR Article 31. | CY | CyDPC | GDPR | €1,500 | ↗ |
| 27 Oct 2025 | Anonymisiert (DSB 2025-0.811.087)The controller unlawfully processed personal data through video surveillance, including public sidewalk areas, contrary to data minimization principles. Images were also published online without a legal basis. | AT | DSB | GDPR | €1,500 | ↗ |
| 01 Sept 2021 | B.B.B.The entity was fined by the AEPD for operating a video surveillance system that unjustifiably affected the privacy of third parties. The case indicates a lack of adequate safeguards or proportionality in data processing. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2019 | COMERCIAL VIGOBRANDY, S.L.COMERCIAL VIGOBRANDY, S.L. was fined by the AEPD 1,500 EUR for installing a video surveillance camera without the required informational sign inside the premises. The case concerned a breach of data protection rules and the duty to properly inform individuals being recorded. | ES | AEPD | GDPR | €1,500 | ↗ |