Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
13 Jul 2023B.B.B.B.B.B. was fined by the AEPD 600 EUR for installing a surveillance camera directed at a public area without prior administrative authorization and without proper signage. The authority found breaches of Articles 5(1)(c) and 13 GDPR.ESAEPDGDPR€600
30 Dec 2020B.B.B.The entity was fined by the AEPD in the amount of 1,500 EUR. The violation concerned installing surveillance cameras directed toward public areas without the required authorization and without compliant informational signage.ESAEPDGDPR€1,500
05 Jan 2024B.B.B.The entity was fined for publishing personal images and phone numbers on Telegram channels without the data subjects’ consent. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€10,000
03 Nov 2021B.B.B.The entity was fined by the AEPD 10,000 EUR for publishing the complainant's phone number on a website without consent. This led to unwanted calls, and despite requests for removal, the number reappeared, breaching GDPR Article 6.ESAEPDGDPR€10,000
07 Jul 2022B.B.B.The entity installed a surveillance camera without proper signage, covering common areas. This breached the data protection rights of affected individuals and the applicable transparency requirements.ESAEPDGDPR€600
27 Apr 2022B.B.B.The entity was fined by the AEPD in the amount of EUR 300 for improperly positioning a surveillance camera. The authority found that the device could capture a private parking area and personal data without sufficient justification.ESAEPDGDPR€300
23 Mar 2023B.B.B.B.B.B. was fined by the AEPD in the amount of 2,000 EUR for sending unsolicited commercial emails after a request for data deletion. The conduct breached Article 21 of the LSSI on marketing communications without consent.ESAEPDePrivacy€2,000
21 Jul 2023B.B.B.B.B.B. was fined by the AEPD 300 EUR for installing surveillance cameras without the required authorization. The cameras captured public areas and a neighbor's property, which breached data protection rules.ESAEPDGDPR€300
21 May 2024B.B.B.B.B.B. was fined 2,000 EUR by the AEPD for unlawfully processing personal data. The case concerned the inclusion of data in the ASNEF credit information system without meeting the legal requirements under GDPR.ESAEPDGDPR€2,000
21 Mar 2022B.B.B.The AEPD imposed a 300 EUR fine on B.B.B. for improperly directing a camera toward a transit area. The case concerned non-compliance with data protection rules governing video surveillance.ESAEPDGDPR€300
04 Apr 2022B.B.B.The entity was fined by the AEPD in the amount of EUR 10,000 for publishing personal data, including images and videos, without the consent of the data subjects. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€10,000
26 Jan 2022B.B.B.The entity installed a video surveillance system covering public transit areas without a justified cause. This breached data protection principles.ESAEPDGDPR€500
14 Jun 2023B.B.B.The entity was fined EUR 300 by the AEPD for installing a camera on the exterior facade of a building, aimed at public space, without the required administrative authorization. The authority treated this as a breach of data protection rules.ESAEPDGDPR€300
04 Apr 2023B.B.B.A neighbor installed a digital peephole with video recording capabilities without the consent of the homeowners' association. AEPD found that personal data were processed without a lawful basis, in breach of Article 6(1) GDPR.ESAEPDGDPR€300
07 Dec 2023B.B.B.The educational institution did not inform parents about data processing on Chromebooks used by students. It also failed to have a contract with the data processor, which breaches GDPR Articles 13 and 28.ESAEPDGDPR€5,000
09 Mar 2023B.B.B.B.B.B. was fined by the AEPD EUR 600 for failing to implement corrective measures regarding improperly oriented surveillance cameras. The authority also found a failure to provide the required information under the GDPR.ESAEPDGDPR€600
12 Jul 2022B.B.B.B.B.B. was fined by the AEPD EUR 800 for sending commercial emails without the recipient's consent. The authority found this breached Article 21 of the LSSI on unsolicited electronic communications.ESAEPDePrivacy€800
16 Mar 2023B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for failing to provide adequate information about video surveillance. The authority found a breach of Article 13 GDPR because the affected individuals did not receive the required information.ESAEPDGDPR€300
25 Aug 2022B.B.B.A lawyer sent personal data without authorization via WhatsApp for professional promotion. The AEPD found a breach of GDPR Articles 6 and 5(1)(f) and imposed a fine of 4,000 EUR.ESAEPDGDPR€4,000
20 Feb 2023B.B.B.B.B.B. installed a surveillance camera aimed at a private property without authorization. The AEPD found this to be a breach of Article 5(1)(c) GDPR.ESAEPDGDPR€300