BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 17 Feb 2025 | CLUB DE GOLF VILLA DE CUÉLLARCLUB DE GOLF VILLA DE CUÉLLAR was fined by the AEPD EUR 400 for failing to inform an employee about the installation and operation of surveillance cameras. The authority found a breach of Article 13 GDPR. | ES | AEPD | GDPR | €400 | ↗ |
| 20 Jul 2020 | CENTRO DE INVESTIGACIÓN Y ESTUDIO PARA LA OBESIDAD, S.L.The entity unlawfully transferred personal data without consent, in breach of Article 6 of the GDPR. The case resulted in an administrative fine of 50,000 EUR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2024 | COMUNIDAD DE PROPIETARIOS L.L.L.COMUNIDAD DE PROPIETARIOS L.L.L. was fined by the AEPD 2,000 EUR for posting a list of debtor co-owners in a publicly accessible area and for sending erroneous debtor lists by email without justification. The authority found that these actions breached data protection principles. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2015 | JYCTEL ESPAÑA SLJYCTEL ESPAÑA SL was fined by the AEPD in the amount of 3,000 EUR for sending unsolicited SMS and WhatsApp messages. The company did not provide information on how to exercise the right to object, which breaches Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 09 Sept 2021 | PACKLINK SHIPPING S.L.PACKLINK SHIPPING S.L. was fined by the AEPD €2,000 for using non-essential cookies on its website without providing the required information or obtaining explicit user consent. The authority treated this as a breach of data protection rules. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Jan 2025 | B3C CONSULTORÍA DE SERVICIOS 2010 S.L.B3C CONSULTORÍA DE SERVICIOS 2010 S.L. was fined by the AEPD EUR 800 for subcontracting TELCO without authorization from the data controller, AIRE NETWORKS. The company also failed to impose the required contractual obligations on TELCO, breaching GDPR Articles 28.2 and 28.4. | ES | AEPD | GDPR | €800 | ↗ |
| 20 Dec 2025 | JOMAFRAN 2013, S. LJOMAFRAN 2013, S. L was fined by the AEPD EUR 1,400 for sending unsolicited commercial emails without prior consent. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,400 | ↗ |
| 22 Jan 2024 | CAJASIETE, CAJA RURAL SOCIEDAD COOPERATIVA DE CREDITOCAJASIETE was fined by the AEPD in the amount of 250,000 EUR for a data security incident. The incident compromised the confidentiality and integrity of personal data, breaching GDPR Article 5(1)(f). | ES | AEPD | GDPR | €250,000 | ↗ |
| 01 Jan 2013 | CONSORCIO PARA LA INNOVACION Y FORMACION EMPRESARIAL S.L.L.The entity was fined by the AEPD in the amount of 1,200 EUR for sending unsolicited commercial emails. This conduct breached Article 21 of the LSSI, which prohibits unwanted marketing communications. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 10 Apr 2023 | BIROU GAS, S.L.BIROU GAS, S.L. was fined EUR 60,000 by the AEPD for breaching Article 58(1) of the GDPR. The company did not respond to information requests from the supervisory authority. | ES | AEPD | GDPR | €60,000 | ↗ |
| 22 Jul 2022 | MAX2PROTECT, S.L.MAX2PROTECT, S.L. was fined EUR 4,000 by the AEPD for sending commercial emails without the required authorization. The case concerned a breach of Article 21 of the LSSI and involved unauthorized marketing communications. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 04 Oct 2021 | ENDESA ENERGÍA, S.A.U.ENDESA ENERGÍA, S.A.U. was fined by the AEPD 50,000 EUR for breaching GDPR data accuracy principles. The case involved identity theft and false documentation in a request to transfer an electricity contract. | ES | AEPD | GDPR | €50,000 | ↗ |
| 30 Oct 2015 | CLASE EJECUTIVA, S.L.CLASE EJECUTIVA, S.L. was fined by the AEPD EUR 400 for sending commercial emails without prior consent from recipients. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €400 | ↗ |
| 10 Jul 2020 | COMUNIDAD.1The entity was fined for installing surveillance cameras with audio in common areas without proper notice to affected persons. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 16 May 2012 | CONFORAMA ESPAÑA S.A.CONFORAMA ESPAÑA S.A. was fined by the AEPD in the amount of 3,000 EUR for sending unsolicited advertising SMS messages to customers. The conduct breached Article 21 of the LSSI on marketing communications without prior consent. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 05 Mar 2021 | APARTAMENTOS PLAYA DE COVACHOS, S.L.The company was fined by the AEPD in the amount of 1,000 EUR for operating video surveillance without the required information for recorded individuals. It did not identify the data controller, explain how rights could be exercised, or state the purpose of the surveillance, which breaches Article 13 GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2018 | MAISONS DU MONDE ESPAÑA, S.L.MAISONS DU MONDE ESPAÑA, S.L. was fined by the AEPD 15,000 EUR for sending unsolicited commercial SMS messages. The company did not provide recipients with an effective opt-out mechanism, despite prior requests to unsubscribe. | ES | AEPD | ePrivacy | €15,000 | ↗ |
| 20 Feb 2025 | NAROBESA INV, S.L.NAROBESA INV, S.L. was fined EUR 2,000 by the AEPD for failing to provide the required documentation to the data protection authority. The case concerns a breach of the cooperation duty under Article 58(1) GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES, S.A. (MASMOVIL)XFERA MÓVILES, S.A. (MASMOVIL) was fined by the AEPD €60,000 for changing a customer's contract details without proper consent. The authority found that the processing lacked a valid legal basis under GDPR Article 6(1)(a). | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2013 | NOVOPRINT, C.B.NOVOPRINT, C.B. was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails. The emails did not include an unsubscribe mechanism, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,800 | ↗ |