Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
18 May 2022	SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.The company was fined by the AEPD for unlawfully processing personal data. The breach involved sending a wage garnishment notice via WhatsApp without proper authorization or legal basis.	ES	AEPD	GDPR	€5,000	↗
01 Jan 2023	ISA MADRID SERVICIOS, S.L.ISA MADRID SERVICIOS, S.L. was fined EUR 900 by the AEPD for improperly positioning a surveillance camera that captured public areas. The authority also found that adequate signage informing individuals about the surveillance was not provided, in breach of data protection rules.	ES	AEPD	GDPR	€900	↗
20 Feb 2024	SPORT & SPA GEST, S.L.SPORT & SPA GEST, S.L. was fined by the AEPD 20,000 EUR for breaches of GDPR Articles 6(1), 13, 9, and 35. The case concerned improper data processing and insufficient information provided to users.	ES	AEPD	GDPR	€20,000	↗
04 Dec 2023	CARSO TRADING, S.L.CARSO TRADING, S.L. was fined by the AEPD for sending unsolicited commercial emails without prior consent from recipients. The company also failed to respond to a request to stop such communications, which constitutes a breach of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
06 Oct 2020	PROSAD CONSULTORES, S.L.PROSAD CONSULTORES, S.L. was fined by the AEPD 12,000 EUR for sending unsolicited commercial emails without prior consent. The authority found this conduct breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€12,000	↗
05 May 2022	ABUNTIA SERVICES, S.L.ABUNTIA SERVICES, S.L. was fined by the AEPD EUR 1,500 for sending commercial SMS messages without prior consent from recipients. The authority found this breached Article 21 of the LSSI on unsolicited commercial communications.	ES	AEPD	ePrivacy	€1,500	↗
06 Aug 2014	ECLIPSE COMUNICACION DIXITAL S.L.ECLIPSE COMUNICACION DIXITAL S.L. was fined by the AEPD in the amount of 6,000 EUR for sending unsolicited advertising emails. The company continued sending messages despite requests to be removed, which constitutes a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€6,000	↗
28 Oct 2022	FORMAESTUDIO, C.B.FORMAESTUDIO, C.B. was fined €6,000 by the AEPD for requiring students to disclose their COVID vaccination status and present a passport as a condition for participating in teaching practice. The authority found that this processing breached data protection rules.	ES	AEPD	GDPR	€6,000	↗
01 Jan 2024	VODAFONE ESPAÑA, S.A.U.The AEPD fined Vodafone España 200,000 EUR for processing personal data without meeting the legal requirements of Article 6(1) GDPR. The case was linked to a fraudulent SIM card swap that resulted in unauthorized bank transfers.	ES	AEPD	GDPR	€200,000	↗
16 Apr 2025	CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD EUR 500,000 for failing to implement measures to ensure data integrity and confidentiality. The breach resulted in unauthorized access to personal data, indicating insufficient technical or organizational safeguards.	ES	AEPD	GDPR	€500,000	↗
11 Feb 2020	XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 5,000 by the Spanish Data Protection Agency (AEPD) for failing to provide requested information. The conduct breached Article 58(1) of the GDPR and hindered the authority’s supervisory powers.	ES	AEPD	GDPR	€5,000	↗
01 Jan 2023	BANCO BILBAO VIZCAYA ARGENTARIA, S.A.BBVA was fined by the AEPD for a data breach after an employee accessed a customer's banking information and shared it without consent. The authority found that data security measures were violated.	ES	AEPD	GDPR	€70,000	↗
01 Jan 2022	BANCO BILBAO VIZCAYA ARGENTARIA, S.A.BBVA was fined EUR 70,000 by the AEPD for disclosing one client's personal address to another client. The authority found a breach of personal data confidentiality obligations under the GDPR.	ES	AEPD	GDPR	€70,000	↗
10 May 2022	CONECTA5 TELECINCO, S.A.U.CONECTA5 TELECINCO, S.A.U. was fined by the AEPD 50,000 EUR for publishing audio of a victim’s court testimony without voice distortion. The authority found a breach of data protection principles.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2023	MASLUZ ENERGY POWER, S.L.MASLUZ ENERGY POWER, S.L. was fined EUR 90,000 by the AEPD for changing a customer's energy provider without authorization. The authority also found a failure to provide the required information, constituting breaches of GDPR Articles 13 and 6(1).	ES	AEPD	GDPR	€90,000	↗
11 Mar 2021	COMUNIDAD DE PROPIETARIOS B.B.B.COMUNIDAD DE PROPIETARIOS B.B.B. was fined by the AEPD in the amount of 2,000 EUR for irregularities in its video surveillance system. The authority found that the cameras captured public spaces, which breached the data minimization principle under Article 5(1)(c) GDPR.	ES	AEPD	GDPR	€2,000	↗
09 Aug 2021	ACONCAGUA JUEGOS S.A.ACONCAGUA JUEGOS S.A. was fined by the AEPD 10,000 EUR for failing to appoint a Data Protection Officer. The authority also found that the company did not address a data subject’s erasure request within the legal deadline.	ES	AEPD	GDPR	€10,000	↗
26 Apr 2022	CORPORACIÓN DE RADIO Y TELEVISIÓN ESPAÑOLA S.A.The company published audio of a victim's court statement in a high-profile case. The authority found a breach of the data minimization principle because excessive personal data was processed.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2021	COMUNIDAD PROPIETARIOS ***DIRECCIÓN.1The Community of Property Owners was fined by the AEPD EUR 500 for posting on notice boards a list of owners in arrears together with personal data. The information was accessible to third parties, which constituted a breach of data protection rules.	ES	AEPD	GDPR	€500	↗
27 Feb 2025	RED ESPAÑOLA DE IDENTIFICACIÓN DE ANIMALES DE COMPAÑÍAREIAC was fined EUR 600 by the AEPD for failing to provide the required information to the data protection authority. The case concerns Article 58(1) GDPR and reflects a failure to cooperate with the supervisory authority.	ES	AEPD	GDPR	€600	↗

Fine Tracker.