BULLETIN №081Last updated · 27 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 17 Mar 2023 | PLAY FUL KIDS, S.L.PLAY FUL KIDS, S.L. was fined by the AEPD EUR 3,000 for breaching Article 6(1) of the GDPR, which requires a lawful basis for processing personal data. The infringement was classified as very serious. | ES | AEPD | GDPR | €3,000 | ↗ |
| 13 Apr 2022 | PYRAMID CONSULTINGPYRAMID CONSULTING was fined by the AEPD EUR 30,000 for unlawful processing of personal data. The company incorrectly identified an individual as responsible for a traffic violation, which led to an improper administrative sanction. | ES | AEPD | GDPR | €30,000 | ↗ |
| 24 Jun 2019 | MADRILEÑA RED DE GAS S.A.U.Madrileña Red de Gas S.A.U. was fined by the AEPD 12,000 EUR for failing to ensure adequate security and confidentiality of personal data. This led to unauthorized access by a tenant to the contract holder’s data. | ES | AEPD | GDPR | €12,000 | ↗ |
| 10 Jan 2017 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined by the AEPD 10,000 EUR for sending unsolicited commercial SMS messages. The messages were sent despite the complainant being registered on the Robinson List, breaching Articles 21.1 and 21.2 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 21 Jun 2024 | ADMINISTRACIONES BENIPON, S.L.ADMINISTRACIONES BENIPON, S.L. was fined 2,200 EUR by the AEPD for failing to provide access to information as required under Article 58(1) GDPR. The case concerns non-compliance with the supervisory authority’s information access requirements. | ES | AEPD | GDPR | €2,200 | ↗ |
| 05 Jun 2023 | CHINA CENTER LLEIDACHINA CENTER LLEIDA was fined EUR 700 by the AEPD for failing to properly sign its video surveillance system and for not providing customers with required data protection information. The authority found a breach of Article 13 of the GDPR. | ES | AEPD | GDPR | €700 | ↗ |
| 21 Feb 2026 | VERTI ASEGURADORA, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.VERTI Aseguradora was fined by the AEPD €5,000 for sending promotional emails without providing a simple and free way for recipients to opt out. The authority found this to be a breach of Article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2024 | GESTERNOVA, S.A.GESTERNOVA, S.A. was fined by the AEPD in the amount of 220,000 EUR for processing personal data without a valid legal basis. The authority also found that the company failed to provide the required information to the data subject, in breach of GDPR Articles 6(1), 13, and 14. | ES | AEPD | GDPR | €220,000 | ↗ |
| 01 Jan 2014 | STAGE ENTERTAINMENT ESPAÑA, S.L.STAGE ENTERTAINMENT ESPAÑA, S.L. was fined by the AEPD 2,000 EUR for continuing to send commercial emails to a user despite repeated requests to delete their data and stop communications. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Sept 2021 | B.B.B.The entity was fined by the AEPD for operating a video surveillance system that unjustifiably affected the privacy of third parties. The case indicates a lack of adequate safeguards or proportionality in data processing. | ES | AEPD | GDPR | €1,500 | ↗ |
| 18 Dec 2019 | GRUPO CAROLIZANGRUPO CAROLIZAN was fined EUR 3,000 by the AEPD for installing a video surveillance system that disproportionately captured public space. The authority found no sufficient justification for the scope of monitoring, which infringed the rights of third parties. | ES | AEPD | GDPR | €3,000 | ↗ |
| 07 Jan 2022 | CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. was fined by the AEPD EUR 70,000 for including personal data in credit information systems without a proper legal basis. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2014 | CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD 5,000 EUR for sending unauthorized commercial emails. The conduct occurred after the complainant had exercised the right to object to the use of their data for advertising purposes. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 22 Nov 2021 | SCF ZHU, S.L.SCF ZHU, S.L. was fined by the AEPD 1,000 EUR for failing to display visible information signs for its video surveillance system and for not maintaining a record of processing activities. The case reflects deficiencies in basic transparency and documentation obligations under data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2019 | COMERCIAL VIGOBRANDY, S.L.COMERCIAL VIGOBRANDY, S.L. was fined by the AEPD 1,500 EUR for installing a video surveillance camera without the required informational sign inside the premises. The case concerned a breach of data protection rules and the duty to properly inform individuals being recorded. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jul 2021 | A.A.A.The entity was fined by the AEPD 1,000 EUR for operating a video surveillance system without proper informational signage and customer information forms. The authority found this to be a breach of Article 13 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 18 May 2022 | EURO DONER KEBABEURO DONER KEBAB was fined by the AEPD EUR 300 for improperly directing a video surveillance camera toward a public space without justification. The authority also found that the required informational signage was missing. | ES | AEPD | GDPR | €300 | ↗ |
| 17 Jul 2015 | VUELING AIRLINES, S.A.VUELING AIRLINES, S.A. was fined by the AEPD 5,000 EUR for sending unsolicited commercial emails to a user who had previously unsubscribed. The authority found this breached article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 14 May 2010 | NEW CENTER SYSTEM, S.L.NEW CENTER SYSTEM, S.L. was fined by the AEPD 1,200 EUR for sending an unsolicited commercial email. The authority found that recipients were not given a simple and free way to object to the use of their data for advertising, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 17 Jun 2019 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined by the AEPD for incorrect processing of personal data. The error caused billing mistakes because one customer’s data was mixed with another subscriber’s information. | ES | AEPD | GDPR | €60,000 | ↗ |