BULLETIN №081Last updated · 27 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 16 Jan 2014 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 41,000 EUR for sending commercial communications by email and SMS without the recipients’ consent. The conduct breached Article 21.1 of the LSSI, which requires prior consent for such messages. | ES | AEPD | ePrivacy | €41,000 | ↗ |
| 26 Sept 2023 | COLEGIO ALONAI, S.L.COLEGIO ALONAI, S.L. was fined by the AEPD 5,000 EUR for installing surveillance cameras inside classrooms and outside the school without properly informing employees. The authority also found inadequate signage, constituting a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2017 | NIUNO ESTÉTICA, S.L.NIUNO ESTÉTICA, S.L. was fined by the AEPD 1,000 EUR for sending unsolicited commercial SMS messages. The conduct breached the requirements of Spain’s LSSI governing marketing communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 22 May 2024 | TRADING INTERNATIONAL TOURIST, S.L.TRADING INTERNATIONAL TOURIST, S.L. was fined 2,000 EUR by the AEPD for adding the complainant’s phone number to a WhatsApp group with more than 500 members without consent. The authority found a breach of Article 6(1) GDPR, which requires a lawful basis for processing personal data. | ES | AEPD | GDPR | €2,000 | ↗ |
| 07 Apr 2021 | IMPORTACIONES CRBD, S.L.The entity was fined for sending commercial emails without the recipient's consent, in breach of Article 21 of the LSSI. The case concerns unauthorized direct electronic marketing. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 14 Oct 2024 | ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.ATRESMEDIA was fined by the AEPD EUR 50,000 for publishing a video containing violent content and the voices of the aggressors and the victim. The authority found a breach of data protection rules. | ES | AEPD | GDPR | €50,000 | ↗ |
| 04 Jun 2020 | AUTO DESGUACES IGLESIAS, S.L.AUTO DESGUACES IGLESIAS, S.L. was fined by the AEPD 1,500 EUR for using cameras that recorded public spaces without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 28 Nov 2017 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 45,000 EUR by the AEPD for sending commercial emails without providing a valid electronic address for exercising the right to object. The authority found this to be a breach of LSSI rules on commercial communications. | ES | AEPD | ePrivacy | €45,000 | ↗ |
| 31 Oct 2022 | FACTOR ENERGÍA, S.A.FACTOR ENERGÍA, S.A. was fined by the AEPD EUR 40,000 for sending personalized marketing messages using personal data without a legal basis. The authority found a breach of Article 6(1) of the GDPR. | ES | AEPD | GDPR | €40,000 | ↗ |
| 30 Jul 2024 | NUDE PROJECT, S.L.NUDE PROJECT, S.L. was fined EUR 20,000 by the AEPD for sending unsolicited advertising emails to a customer without obtaining explicit consent. The authority found this conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 02 Feb 2023 | LEADDESK, S.L.LEADDESK, S.L. was fined 500 EUR by the Spanish Data Protection Agency (AEPD). The case concerned the failure to provide requested information to the authority, which constitutes a breach of Article 58.1 of the GDPR. | ES | AEPD | GDPR | €500 | ↗ |
| 13 Sept 2017 | NO QUIERO PERDER EL TIEMPO, S.L.The company was fined by the AEPD for displaying the AEPD quality seal and another association’s seal on its website without authorization. The authority also found inadequate information and no valid consent for data collection. | ES | AEPD | ePrivacy | €8,000 | ↗ |
| 01 Jan 2020 | XFERA MÓVILES, S.A. (MASMOVIL)XFERA MÓVILES, S.A. (MASMOVIL) was fined by the AEPD for processing personal data without a lawful basis, in breach of Article 6 GDPR. The case indicates that the company lacked a valid legal ground for the processing activity. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2015 | ORANGE ESPAGNE, S.A.U.JAZZ TELECOM S.A.U. was fined for sending unsolicited SMS advertising to a non-customer. The authority found that the conduct breached the LSSI rules on marketing communications. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 03 Jul 2025 | WALLAPOP, S.L.WALLAPOP, S.L. was fined by the AEPD in the amount of 5,000 EUR for using cookies without properly informing users or obtaining their consent. The authority found this conduct to be in breach of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 25 Feb 2022 | FINCAS ARENYS SLFINCAS ARENYS SL was fined by the AEPD 3,000 EUR for failing to provide consent documentation and information on data processing to a prospective tenant. The company also did not respond to requests for the contact details of its Data Protection Officer. | ES | AEPD | GDPR | €3,000 | ↗ |
| 19 Mar 2024 | LOCAL VERTICALS, S.L.LOCAL VERTICALS, S.L. was fined by the AEPD 10,000 EUR for storing cookies without user consent and for failing to provide a legal notice on its website. The case concerns breaches of data protection rules and website transparency obligations. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 23 Apr 2021 | B.B.B.The entity was fined for operating a video surveillance system at the workplace without informing employees through the required informational signage. The authority found this to be a breach of Article 13 GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 03 Feb 2022 | DIGI SPAIN TELECOM, S.L.DIGI Spain Telecom, S.L. was fined by the AEPD in the amount of EUR 70,000 for a breach of Article 6(1) GDPR. The case concerned the unauthorized duplication of a SIM card in an identity theft incident, which resulted in financial losses for the complainant. | ES | AEPD | GDPR | €70,000 | ↗ |
| 15 Mar 2022 | CLÍNICA DENTAL SAN FRANCISCO, S.L.The entity continued sending advertising messages to a former patient despite multiple requests to unsubscribe. AEPD found this to be a breach of data protection rules and imposed a EUR 7,000 fine. | ES | AEPD | ePrivacy | €7,000 | ↗ |