BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 Sept 2019 | VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 60,000 EUR for processing personal data without consent. The breach led to an unauthorized service change and debt collection attempts. | ES | AEPD | GDPR | €60,000 | ↗ |
| 31 Jan 2023 | PRESTAMER, S.L.PRESTAMER, S.L. sent an email to 472 recipients without using BCC, which exposed recipients’ personal data. The AEPD imposed a 3,000 EUR fine for breaching data protection rules. | ES | AEPD | GDPR | €3,000 | ↗ |
| 07 Jan 2020 | CHENMING YE (BAZAR REAL)CHENMING YE (BAZAR REAL) was fined EUR 900 by the AEPD. The authority found that the required visible notice identifying the data controller was missing, which breached data protection rules. | ES | AEPD | GDPR | €900 | ↗ |
| 11 Aug 2020 | FEDERACIÓN DE BALONCESTO DE CASTILLA Y LEÓNFEDERACIÓN DE BALONCESTO DE CASTILLA Y LEÓN was fined by the AEPD 5,000 EUR for the unauthorized disclosure of personal data. The data included names, DNI numbers, and signatures, which were published in a newspaper and on social media. | ES | AEPD | GDPR | €5,000 | ↗ |
| 20 Dec 2019 | TECSIBLE, S.L.TECSIBLE, S.L. was fined by the AEPD 5,000 EUR for a data protection breach. The case involved unsolicited contact and messages sent to an individual on the Robinson list through a third-party call center. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2013 | EUROPCAR IB S.A.EUROPCAR IB S.A. was fined by the AEPD 1,200 EUR for sending unsolicited commercial emails to a user. The recipient had previously asked not to receive such communications, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 01 Jan 2023 | B.B.B.The entity was fined EUR 600 by the AEPD for improperly directing surveillance cameras toward a neighbor's property. This conduct breached data protection rules and affected the privacy of third parties. | ES | AEPD | GDPR | €600 | ↗ |
| 01 Jan 2019 | CORPORACION DE RADIO Y TELEVISION ESPAÑOLA SACORPORACION DE RADIO Y TELEVISION ESPAÑOLA SA was fined by the AEPD for a security incident involving the loss of unencrypted USB drives containing personal data. The authority found a breach of Article 32 GDPR on appropriate technical and organisational security measures. | ES | AEPD | GDPR | €60,000 | ↗ |
| 08 Nov 2022 | B.B.B.The entity installed a surveillance camera on the facade of a residence without the required administrative authorization. The camera captured public areas and the complainant’s home entrance, breaching data protection principles. | ES | AEPD | GDPR | €300 | ↗ |
| 25 Jun 2024 | COMUNIDAD.1The community of property owners disclosed a resident’s personal data, including their DNI, in meeting minutes. AEPD found this breached confidentiality principles and imposed a 300 EUR fine. | ES | AEPD | GDPR | €300 | ↗ |
| 01 Jan 2016 | GRUPO YAMM COMIDA A DOMICILIO S.L.The entity was fined for sending unsolicited commercial emails and for failing to honor unsubscribe requests. This constituted a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,700 | ↗ |
| 16 Dec 2022 | INTER PARTNER ASSISTANCE SERVICIOS ESPAÑA, S.A.INTER PARTNER ASSISTANCE SERVICIOS ESPAÑA, S.A. was fined by the AEPD 30,000 EUR for potentially transferring personal data internationally without proper disclosure. This was contrary to the company’s stated privacy policies. | ES | AEPD | GDPR | €30,000 | ↗ |
| 19 Nov 2018 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 5,000 EUR for breaching data quality principles. The company incorrectly included personal data in a creditworthiness file despite a prior order to correct billing errors. | ES | AEPD | GDPR | €5,000 | ↗ |
| 28 Mar 2022 | CENTRO MÉDICO SALUS BALEARES, S.L.CENTRO MÉDICO SALUS BALEARES, S.L. was fined by the AEPD 30,000 EUR for breaching data protection rules. The case concerned displaying patients’ body temperatures in a way that could be seen by unauthorized third parties, which compromised confidentiality. | ES | AEPD | GDPR | €30,000 | ↗ |
| 22 Jul 2019 | SANTI 3000, S.L.SANTI 3000, S.L. was fined by the AEPD for using video surveillance footage without informing employees. The authority treated this as a breach of data protection principles. | ES | AEPD | GDPR | €5,500 | ↗ |
| 16 Dec 2022 | NORDETIA CLINICS IBERIA, S.L.NORDETIA CLINICS IBERIA, S.L. was fined 3,000 EUR by the AEPD. The authority found that the company obstructed an inspection by failing to provide access required under Article 58(1) GDPR. | ES | AEPD | GDPR | €3,000 | ↗ |
| 19 Mar 2025 | XFERA MÓVILES, S.A.U.XFERA MÓVILES, S.A.U. was fined by the AEPD 10,000 EUR for sending unsolicited SMS advertisements to a number registered on the Robinson List. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 20 Apr 2023 | HOLALUZ-CLIDOM, S.A.HOLALUZ-CLIDOM, S.A. was fined EUR 70,000 by the AEPD for processing personal data without consent. The company registered energy supplies for properties without the owner's consent, which breached Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2019 | TELEFONICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined EUR 30,000 by the AEPD for charging a customer for a phone line they did not own. The authority found a breach of the GDPR data accuracy principle. | ES | AEPD | GDPR | €30,000 | ↗ |
| 07 Dec 2023 | ASESORÍA Y PROGRAMACIÓN PROFESIONAL, S.L.The entity was fined for continuing to send advertising emails despite the recipient's attempts to unsubscribe. This conduct breached Article 21 of the LSSI and resulted in a EUR 5,000 penalty. | ES | AEPD | ePrivacy | €5,000 | ↗ |