Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
12 Nov 2014Yueming LiYueming Li was fined EUR 2,400 by the Italian data protection authority, Garante. The case concerned a failure to provide data subjects with the required information about the processing of personal data through a video surveillance system at Sala VLT Video Lottery 999 in Milan.ITGaranteGDPR€2,400
12 Nov 2014Areacom s.r.l.Areacom s.r.l. was fined by the Garante 16,000 EUR for collecting personal data through its website without providing the required privacy notice. The breach concerned Article 13 of the Italian Data Protection Code.ITGaranteGDPR€16,000
12 Nov 2014One Italia s.r.l.One Italia s.r.l. was fined €200,000 by the Garante for sending unsolicited promotional messages related to a value-added service. The authority found that proper consent and adequate information were not obtained, in breach of data protection rules.ITGaranteGDPR€200,000
12 Nov 2014Associazione sportiva dilettantistica Sport Fashion (A.S.D. Sport Fashion)The sports association was fined by the Garante 10,000 EUR for processing clients' biometric data without the required information and consent. The authority found this to be a breach of privacy rules.ITGaranteGDPR€10,000
12 Nov 2014Paolo DorelliPaolo Dorelli was fined by the Garante EUR 2,400 for failing to provide the required information to data subjects regarding video surveillance at a public establishment. This constituted a breach of Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
13 Nov 2014GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD 20,000 EUR for continuing to send commercial emails after the user requested deletion of personal data and opted out of communications. The case indicates a failure to respect the data subject’s withdrawal of consent and request to stop marketing processing.ESAEPDePrivacy€20,000
14 Nov 2014TELEFÓNICA MÓVILES ESPAÑA S.A.U.TELEFÓNICA MÓVILES ESPAÑA S.A.U. was fined by the AEPD 1,000 EUR for sending unsolicited commercial SMS messages to a customer. The recipient had previously requested to opt out of such communications, but the messages continued.ESAEPDePrivacy€1,000
14 Nov 2014Geniki TrapezaThe bank failed to ensure the accuracy of personal data and did not respond adequately to a data access request. The case concerns breaches of data quality obligations and the handling of data subject rights.GRHDPAGDPR€30,000
20 Nov 2014Asl Napoli 2 nordThe Garante imposed a 16,000 EUR fine on Asl Napoli 2 nord for failing to designate data protection officers and for keeping surveillance footage longer than permitted without prior authorization. The case concerned organizational compliance failures and unlawful data retention.ITGaranteGDPR€16,000
20 Nov 2014Centro Nautico Tirreno s.r.l.Centro Nautico Tirreno s.r.l. was fined by the Garante 2,400 EUR for failing to provide the required privacy notice when collecting personal data through a web form. The authority found that individuals were not properly informed before their data was collected.ITGaranteGDPR€2,400
20 Nov 2014Impresa costruzioni edili e stradali – dr. Ing. Michele Bianchi & C. - s.r.l.The company was fined by the Garante 2,400 EUR for failing to provide the required privacy notice to data subjects when collecting personal data through a web form on its website. The case concerned a breach of the Italian Data Protection Code.ITGaranteGDPR€2,400
20 Nov 2014Aimon s.r.l.Aimon s.r.l. was fined EUR 32,000 by the Garante for sharing customers’ personal data with various companies without proper notice and consent. The authority found that the conduct breached privacy rules.ITGaranteGDPR€32,000
20 Nov 2014Andrea Romualdo CerriAndrea Romualdo Cerri was fined €2,400 by the Garante. The violation concerned failing to provide the required information to data subjects when collecting personal data through a web form on the company website.ITGaranteGDPR€2,400
04 Dec 2014Comune di SparaniseComune di Sparanise was fined for unlawfully publishing personal data, including IBAN and bank account details, on its institutional website without a legal basis. The authority found this to be a breach of data protection rules.ITGaranteGDPR€8,000
04 Dec 2014Hotel Stamira s.r.l.Hotel Stamira s.r.l. was fined by the Garante for processing personal data related to job applications without providing the required information notice. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
04 Dec 2014R. Nautica s.r.l.R. Nautica s.r.l. was fined by the Garante 2,400 EUR for failing to provide the required privacy notice to individuals whose personal data was collected through a web form. The conduct breached Article 13 of the Italian Privacy Code.ITGaranteGDPR€2,400
04 Dec 2014Antonio FrazzanoAntonio Frazzano was fined EUR 4,000 by the Garante for sending promotional faxes without the required information notice and without obtaining recipient consent. The case concerned violations of data protection and direct marketing rules.ITGaranteGDPR€4,000
04 Dec 2014Nautica Cicuttin s.r.l.Nautica Cicuttin s.r.l. was fined by the Garante 2,400 EUR for providing inadequate information to data subjects about the processing of personal data collected through a web form on its website. The breach concerned the duty to provide clear information before collecting the data.ITGaranteGDPR€2,400
04 Dec 2014Enrico TecchioThe Garante fined Enrico Tecchio EUR 2,400 for failing to provide data subjects with information about the processing of personal data through a video surveillance system at a dental practice. The case concerned the duty to inform individuals subject to monitoring.ITGaranteGDPR€2,400
04 Dec 2014Manca FedericoManca Federico was fined by the Garante in the amount of EUR 2,400 for failing to provide the required information to data subjects when collecting personal data through a web form on his website. The case concerns a breach of transparency and information duties in online data collection.ITGaranteGDPR€2,400