BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 29 Feb 2024 | SOCIETE AYANT POUR ACTIVITE LA RECHERCHE ET LE DEVELOPPEMENT SCIENTIFIQUE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on SOCIETE AYANT POUR ACTIVITE LA RECHERCHE ET LE DEVELOPPEMENT SCIENTIFIQUE under a simplified procedure. The case concerns a violation identified by the French supervisory authority. | FR | CNIL | GDPR | €10,000 | ↗ |
| 04 Apr 2024 | SOCIETE AYANT POUR ACTIVITE LA PROSPECTION COMMERCIALE PAR COURRIEL POUR LE COMPTE D'ANNONCEURSThe CNIL imposed EUR 25,000 on SOCIETE AYANT POUR ACTIVITE LA PROSPECTION COMMERCIALE PAR COURRIEL POUR LE COMPTE D'ANNONCEURS as a liquidation of a penalty. The measure relates to non-compliance with a prior obligation and is enforcement in nature. | FR | CNIL | GDPR | €25,000 | ↗ |
| 03 Sept 2025 | SOCIETE AYANT POUR ACTIVITE LA PROMOTION IMMOBILIERE DE LOGEMENTS (procédure simplifiée)CNIL imposed an administrative fine of 20,000 EUR on SOCIETE AYANT POUR ACTIVITE LA PROMOTION IMMOBILIERE DE LOGEMENTS. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 18 Dec 2025 | SOCIETE AYANT POUR ACTIVITE L'AMENAGEMENT PAYSAGER, L'INSTALLATION DE JARDINS ET DE TERRAINS DE SPORT (procédure simplifiée)The CNIL imposed an administrative fine of EUR 7,000 on the company engaged in landscaping, garden installation, and sports field installation. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €7,000 | ↗ |
| 17 Oct 2024 | SOCIETE AYANT POUR ACTIVITE LA FOURNITURE DE PRESTATIONS DE SERVICE (GESTION APPELS TELEPHONIQUES) (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on SOCIETE AYANT POUR ACTIVITE LA FOURNITURE DE PRESTATIONS DE SERVICE (GESTION APPELS TELEPHONIQUES). The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 05 Jun 2025 | SOCIETE AYANT POUR ACTIVITE LA FABRICATION ET LE COMMERCE DE PRODUITS PHARMACEUTIQUES DESTINES AU SECTEUR ALIMENTAIRE (procédure simplifiée)The CNIL imposed an administrative fine of 5,000 EUR on the company. The decision was issued under a simplified procedure. | FR | CNIL | GDPR | €5,000 | ↗ |
| 30 Dec 2025 | SOCIETE AYANT POUR ACTIVITE L'ACQUISITION ET LA GESTION D'HOTELS/RESIDENCES HOTELIERES (procédure simplifiée)The CNIL imposed an administrative fine of 5,000 EUR on the company engaged in the acquisition and management of hotels and hotel residences. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €5,000 | ↗ |
| 31 Jan 2024 | SOCIETE AYANT POUR ACTIVITE LA COMMERCIALISATION ET GESTION DE PROGRAMMES ET CARTES DE FIDELITECNIL imposed an administrative fine of EUR 310,000 on SOCIETE AYANT POUR ACTIVITE LA COMMERCIALISATION ET GESTION DE PROGRAMMES ET CARTES DE FIDELITE. The case concerns identified breaches of rules supervised by CNIL. | FR | CNIL | GDPR | €310,000 | ↗ |
| 11 Dec 2025 | SOCIETE AYANT POUR ACTIVITE L'ACCOMPAGNEMENT, L'ORIENTATION ET L'EDUCATION DE VICTIMES D'INCESTES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on SOCIETE AYANT POUR ACTIVITE L'ACCOMPAGNEMENT, L'ORIENTATION ET L'EDUCATION DE VICTIMES D'INCESTES and issued an injunction. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 19 Dec 2024 | SOCIETE ASSURANT DES ACTIVITES DE SECURITE PRIVE, PROTECTION RAPPROCHEE, HOTESSARIAT ET GESTION LOGISTIQUE (procédure simplifiée)CNIL imposed an administrative fine of EUR 8,000 on SOCIETE ASSURANT DES ACTIVITES DE SECURITE PRIVE, PROTECTION RAPPROCHEE, HOTESSARIAT ET GESTION LOGISTIQUE under a simplified procedure. The record indicates a regulatory breach, but no further details were provided. | FR | CNIL | GDPR | €8,000 | ↗ |
| 15 Apr 2021 | Società triveneta di chirurgiaSocietà triveneta di chirurgia was fined EUR 2,000 by the Garante for processing personal data without meeting the requirements of lawfulness, fairness, and transparency. The authority also found a breach of the data minimization principle. | IT | Garante | GDPR | €2,000 | ↗ |
| 22 Jun 2016 | Società Territorio Turismo & Sport s.r.l.Società Territorio Turismo & Sport s.r.l. was fined by the Garante 2,400 EUR. The case concerned collecting personal data, including name and email, via its website without providing users with the required information notice. | IT | Garante | GDPR | €2,400 | ↗ |
| 15 Dec 2022 | Societatea Energetică Electrica S.A.In November 2022, ANSPDCP completed an investigation at Societatea Energetică Electrica S.A. and found a GDPR violation. The operator was fined 5,000 EUR and advised to take all necessary measures to comply with the rules. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 22 Feb 2022 | Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc”The law firm Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc” was fined by ANSPDCP for violating GDPR provisions. The penalty amounted to EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 06 Dec 2021 | Societatea Civilă Medicală Policlinica TommedANSPDCP completed an investigation at Societatea Civilă Medicală Policlinica Tommed and found breaches of GDPR provisions. The operator was fined and required to align data collection and processing activities with data protection requirements to prevent unauthorized disclosure of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 28 Apr 2022 | Società Ospedale San Raffaele s.r.l.The Garante fined Società Ospedale San Raffaele s.r.l. EUR 70,000 for making online medical reports accessible to other patients. The case involved a breach of personal data protection and confidentiality of health information. | IT | Garante | GDPR | €70,000 | ↗ |
| 02 Dec 2021 | Società Med Store Saronno s.r.l.The Garante fined Società Med Store Saronno s.r.l. EUR 7,000 for inadequate data protection measures. The authority found insufficient password security and no HTTPS protocol, affecting personal health data. | IT | Garante | GDPR | €7,000 | ↗ |
| 24 Nov 2022 | Società Lombarda Sport s.r.l.Società Lombarda Sport s.r.l. was fined by the Garante 4,000 EUR for processing personal data without an adequate legal basis. The authority also found failures to ensure data integrity and confidentiality in connection with the issuance of medical certificates for non-competitive sports activities. | IT | Garante | GDPR | €4,000 | ↗ |
| 28 Oct 2021 | Società LARCSocietà LARC was fined EUR 8,000 by the Garante for violations related to the processing of health data. The authority found non-compliance with GDPR requirements in the handling of these data. | IT | Garante | GDPR | €8,000 | ↗ |
| 25 Nov 2021 | Società H San Raffaele Resnati s.r.l.The Garante imposed a fine of EUR 6,000 on Società H San Raffaele Resnati s.r.l. for violations of data protection rules in the health sector. The case involved a data breach incident, which triggered supervisory action. | IT | Garante | GDPR | €6,000 | ↗ |