BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 24 Mar 2025 | Komendant Główny PolicjiThe President of the Polish data protection authority imposed an administrative fine of PLN 75,000 on the Commander-in-Chief of the Police. The authority found that, during a press conference, personal data and health information of a woman were disclosed without a legal basis. | PL | Urząd Ochrony Danych Osobowych | GDPR | €17,960 | ↗ |
| 24 Mar 2025 | DINAMO SAN JUAN, C.F.DINAMO SAN JUAN, C.F. was fined by the AEPD for processing personal data without a legal basis. The case concerned the failure to effectively remove images of minors from social media after a parent requested deletion. | ES | AEPD | GDPR | €1,000 | ↗ |
| 22 Mar 2025 | DINOLIN, S.A.DINOLIN, S.A. was fined EUR 450 by the AEPD for failing to comply with a data subject's request to delete personal data. The case concerns obligations under the GDPR. | ES | AEPD | GDPR | €450 | ↗ |
| 21 Mar 2025 | Bucharest Down Town Hotel SRLThe National Supervisory Authority for Personal Data Processing fined Bucharest Down Town Hotel SRL for GDPR violations following a complaint. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Mar 2025 | ONE UNITED PROPERTIES S.AIn February 2025, ANSPDCP completed an investigation at ONE UNITED PROPERTIES S.A. The authority found GDPR violations and imposed a fine of 1,000 EUR. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Mar 2025 | FAVORIT SPORTSKA KLADIONICA d.o.o.FAVORIT SPORTSKA KLADIONICA d.o.o. was fined by AZOP EUR 175,000 for failing to store personal data only as long as necessary and for not implementing appropriate technical safeguards. The case concerned breaches of Articles 5 and 32 of the GDPR. | HR | AZOP | GDPR | €175,000 | ↗ |
| 20 Mar 2025 | ONE UNITED PROPERTIES S.AIn February 2025, ANSPDCP completed an investigation at ONE UNITED PROPERTIES S.A. The authority found GDPR violations and imposed a fine of EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 19 Mar 2025 | Komendanta Głównego PolicjiUODO imposed an administrative fine of PLN 75,000 on the Chief Police Commander. The decision was based on breaches of Article 6(1) and Article 9(1) of Regulation 2016/679 concerning the processing of personal data and special-category data. | PL | UODO | GDPR | €17,906 | ↗ |
| 19 Mar 2025 | XFERA MÓVILES, S.A.U.XFERA MÓVILES, S.A.U. was fined by the AEPD 10,000 EUR for sending unsolicited SMS advertisements to a number registered on the Robinson List. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 18 Mar 2025 | AUTOESCUELA A.A.A.The AEPD imposed a EUR 500 fine on AUTOESCUELA A.A.A. for failing to respond to a data subject's request for access to and deletion of personal data. The authority also found that the company did not provide the required signage for its video surveillance system, breaching GDPR information duties. | ES | AEPD | GDPR | €500 | ↗ |
| 18 Mar 2025 | JRSY Laser LimitedThe Jersey Data Protection Authority fined JRSY Laser Limited 500 GBP following an investigation opened on 27 March 2024. The case concerned a breach of data protection requirements by the data controller. | JE | JOIC | GDPR | €594 | ↗ |
| 18 Mar 2025 | ALVEA SOLUCIONES TECNOLÓGICAS, S.L.ALVEA Soluciones Tecnológicas, S.L. was fined 35,000 EUR by the AEPD for improper handling of personal data. The authority cited sharing data without consent and failing to comply with data retention policies. | ES | AEPD | GDPR | €35,000 | ↗ |
| 17 Mar 2025 | FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHAThe Federation published a voter list on its website, disclosing members’ personal data without consent. The authority found that adequate security measures were not in place to protect the data. | ES | AEPD | GDPR | €1,000 | ↗ |
| 17 Mar 2025 | Ministra CyfryzacjiUODO imposed an administrative fine of 100,000 PLN on the Minister of Digital Affairs. The breach concerned Article 6(1) and Article 5(1)(a) of Regulation 2016/679. | PL | UODO | GDPR | €23,887 | ↗ |
| 13 Mar 2025 | IV Casa Firenze Sud di Benedetti Francesco & C. S.a.s.IV Casa Firenze Sud di Benedetti Francesco & C. S.a.s. was fined by the Garante EUR 10,000 for making unsolicited marketing calls without proper consent. The authority found a breach of GDPR rules on data processing and consent. | IT | Garante | GDPR | €10,000 | ↗ |
| 13 Mar 2025 | ImmosanremoImmosanremo was fined EUR 3,000 by the Garante for sending unsolicited marketing messages via WhatsApp without valid consent. The authority found that the conduct breached GDPR rules on processing personal data for promotional purposes. | IT | Garante | GDPR | €3,000 | ↗ |
| 13 Mar 2025 | G@S Telecomunicazioni di Losito LuciaG@S Telecomunicazioni di Losito Lucia was fined EUR 15,000 by the Garante. The case concerned the unauthorized activation of a fixed-line telephone offer, which breached data protection rules. | IT | Garante | GDPR | €15,000 | ↗ |
| 13 Mar 2025 | Encore Thermoengineering s.r.l.Encore Thermoengineering s.r.l. was fined EUR 20,000 by the Garante. The case concerned an inadequate response to former employees’ requests about the status and deletion of their email accounts, which infringed data protection rights. | IT | Garante | GDPR | €20,000 | ↗ |
| 13 Mar 2025 | Interflora Italia S.p.A.Interflora Italia S.p.A. was fined EUR 40,000 by the Garante for sending promotional SMS messages without providing an opt-out option. The case indicates a breach of GDPR requirements for marketing communications and data subject rights. | IT | Garante | GDPR | €40,000 | ↗ |
| 13 Mar 2025 | Comune di RoccarasoThe Garante fined Comune di Roccaraso EUR 2,000 for publishing personal data on a public notice board. The authority found breaches of GDPR Articles 5, 6 and 12, as well as Article 2-ter of the Italian Privacy Code. | IT | Garante | GDPR | €2,000 | ↗ |