Order report
BULLETIN №081Last updated · 28 Jul 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
01 Jan 2013MISCOTA E-COMMERCE, S.L.MISCOTA E-COMMERCE, S.L. was fined by the AEPD 1,800 EUR for sending unsolicited advertising emails to a complainant. The emails continued despite requests to be removed from the mailing list.ESAEPDePrivacy€1,800↗
01 Jan 2020GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD for sending unsolicited advertising emails. The conduct infringed the complainant's rights despite the complainant being listed on the Robinson list and the company having been previously sanctioned for similar conduct.ESAEPDePrivacy€1,800↗
03 Mar 2020SANGIL Y GARCÍA, S.L.SANGIL Y GARCÍA, S.L. was fined by the AEPD 1,800 EUR for sending promotional emails using personal data obtained from the Boletín Oficial de la Propiedad Industrial. The company had no prior client relationship with the recipients, which breached data protection rules.ESAEPDePrivacy€1,800↗
14 May 2026Comune di Mirabella ImbaccariComune di Mirabella Imbaccari was fined for disclosing personal data online without a legal basis and for violating the data minimization principle. The authority also found that the municipality had failed to appoint a Data Protection Officer and to communicate the DPO’s contact details to the supervisory authority.ITGaranteGDPR€1,800↗
20 Mar 2012GAS NATURAL S.U.R. SDG S.A.GAS NATURAL S.U.R. SDG S.A. was fined EUR 1,800 by the AEPD for continuing to send commercial emails to a complainant after they had requested that such communications stop. The authority found this to be a breach of Article 21 of the LSSI.ESAEPDePrivacy€1,800↗
01 Jan 2013GESTION CONFIDENCIAL DESTRUPACK S LGESTION CONFIDENCIAL DESTRUPACK S L was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails despite a prior request to unsubscribe. The authority found a breach of Article 21 of Spain’s LSSI.ESAEPDePrivacy€1,800↗
22 Feb 2012J & J CONSULTINGJ & J CONSULTING was fined by the AEPD €1,800 for sending unsolicited commercial emails. The conduct continued despite unsubscribe requests, which breached Article 21 of the LSSI.ESAEPDePrivacy€1,800↗
14 Mar 2011VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial communications via SMS. The conduct breached Article 21.1 of the LSSI, which prohibits such messages without prior consent.ESAEPDePrivacy€1,800↗
26 Mar 2013GRUPORUM RESPUESTA DIRECTA, S.L.GRUPORUM RESPUESTA DIRECTA, S.L. was fined by the AEPD for sending unsolicited commercial emails without prior consent from recipients. The conduct breached Article 21.1 of the LSSI, which requires prior consent for direct marketing by email.ESAEPDePrivacy€1,800↗
17 Jul 2012FARMACIA INTERNACIONALFARMACIA INTERNACIONAL was fined by the AEPD EUR 1,800 for continuing to send electronic newsletters to a customer after the customer had unsubscribed. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€1,800↗
01 Jan 2014G.L. GISOFT ANALISIS Y DISEÑO S.L.G.L. GISOFT ANALISIS Y DISEÑO S.L. was fined by the AEPD €1,800 for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications.ESAEPDePrivacy€1,800↗
25 Mar 2014GRUPO A4 - FORMACIÓN S.C.GRUPO A4 - FORMACIÓN S.C. was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI despite prior requests for data cancellation.ESAEPDePrivacy€1,800↗
12 May 2021Anonymisé (CNPD decision-17-fr-2021)The CNPD found that the company breached GDPR principles by failing to comply with data minimization and retention limits in its video surveillance practices. A fine of EUR 1,900 was imposed.LUCNPDGDPR€1,900↗
26 Jan 2023SIA “Business magazine”A fine of 1,900 EUR was imposed on SIA “Business magazine” by the DVI. The decision became final on 2023-01-26.LVDVIGDPR€1,900↗
14 Nov 2024Comune di MaddaloniThe Garante fined Comune di Maddaloni EUR 2,000 for failing to communicate the Data Protection Officer’s contact details to the Authority. This constituted a breach of Article 37(7) GDPR.ITGaranteGDPR€2,000↗
08 Feb 2024AREIA CONSULTING, LTDAREIA CONSULTING, LTD was fined by the AEPD in the amount of 2,000 EUR for sending unsolicited commercial emails without prior recipient consent. The authority found this conduct breached Article 21 of the LSSI.ESAEPDePrivacy€2,000↗
07 Dec 2023Hora Credit IFN SAThe authority fined Hora Credit IFN SA for sending documents containing another client's personal data to the complainant's email address. The incident indicates a breach of confidentiality and proper personal data processing requirements.ROANSPDCPGDPR€2,000↗
26 Nov 2021Valoris Center S.R.L.Valoris Center S.R.L. was fined by ANSPDCP EUR 2,000 for a personal data processing security breach. The incident was caused by a call center employee.ROANSPDCPGDPR€2,000↗
28 Oct 2021Anfiteatro Flavio s.r.l.Anfiteatro Flavio s.r.l. was fined EUR 2,000 by the Garante for operating a video surveillance system without the required privacy notice. The authority found a breach of Article 13 of the GDPR.ITGaranteGDPR€2,000↗
10 Nov 2023VERNE INFORMATION TECHNOLOGY, S.L.VERNE INFORMATION TECHNOLOGY, S.L. was fined 2,000 EUR by the AEPD. The case concerned sending unsolicited commercial electronic communications without prior consent or an existing contractual relationship.ESAEPDePrivacy€2,000↗