BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 18 Oct 2011 | MSales GmbHMSales GmbH was fined EUR 30,001 by the AEPD for sending unauthorized SMS messages to a user of its service. The authority found this breached Article 21 of the LSSI on unsolicited electronic communications. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 24 Jun 2020 | MIGUEL IBÁÑEZ BEZANILLA S.L.The entity was fined for failing to implement adequate security measures on its website and for providing insufficient privacy policy information. Non-compliance with cookie policy requirements was also identified. | ES | AEPD | GDPR | €3,000 | ↗ |
| 06 Sept 2011 | VIAJES IBERIA S.A. (ORIZINIA CORPORACION)VIAJES IBERIA S.A. was fined EUR 1,200 by the AEPD for sending unsolicited commercial communications to email addresses obtained from a university website. The company did not obtain proper consent or provide information about the source of the data. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 01 Jan 2023 | DEH NOTIFICACION ELECTRONICA HABILITADA S.L.DEH NOTIFICACION ELECTRONICA HABILITADA S.L. was fined by the AEPD €30,000 for sending unencrypted passwords for digital certificates. The authority considered this a potential data security risk. The procedure concerning Article 6(1) GDPR was archived due to no infringement. | ES | AEPD | GDPR | €30,000 | ↗ |
| 04 Aug 2022 | LEASE PLAN SERVICIOS, S.A.U.LEASE PLAN SERVICIOS, S.A.U. was fined by the AEPD EUR 1,500 for failing to properly handle a request to restrict the processing of personal data. This led to unauthorized commercial communications being sent. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 27 Jan 2022 | MIRACLE IBIZA S.L.MIRACLE IBIZA S.L. was fined by the AEPD in the amount of EUR 500 for improperly positioning a surveillance camera. The camera captured the entrance to a private residence, affecting the privacy of individuals. | ES | AEPD | GDPR | €500 | ↗ |
| 05 Aug 2021 | COMUNIDAD DE VECINOS ***COMUNIDAD.1The community of neighbors was fined EUR 1,000 by the AEPD for failing to provide adequate information about video surveillance. The authority found a breach of Article 13 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Jan 2015 | ARGATEL SOLUTIONS S.L.ARGATEL SOLUTIONS S.L. was fined by the AEPD €2,200 for sending unsolicited SMS messages. The authority found that the company had not obtained prior consent and did not provide an unsubscribe option. | ES | AEPD | ePrivacy | €2,200 | ↗ |
| 05 Aug 2021 | HUBSIDE IBÉRICA S.L.HUBSIDE IBÉRICA S.L. was fined by the AEPD for charging a customer for services that were not contracted. Personal and bank account data were collected during a purchase, and the penalty was reduced due to early payment. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2025 | FEMXA FORMACIÓN, S.L.FEMXA FORMACIÓN, S.L. was fined by the AEPD 25,000 EUR for requiring a full copy of a student's ID during course enrollment. The authority found the data request unnecessary and inconsistent with data protection principles. | ES | AEPD | GDPR | €25,000 | ↗ |
| 08 Oct 2020 | Servicio de Alojamientos Responsables, S.L.The entity was fined by the AEPD 6,000 EUR for processing personal data without a legal basis. The breach involved signing a contract on behalf of an individual without authorization. | ES | AEPD | GDPR | €6,000 | ↗ |
| 23 Oct 2019 | CERRAJERIA CARLOS RODRIGUEZ S.L.CERRAJERIA CARLOS RODRIGUEZ S.L. was fined by the AEPD EUR 1,500 for collecting personal data without providing the required information to the data subjects. The authority found a breach of Article 13 GDPR. | ES | AEPD | GDPR | €1,500 | ↗ |
| 27 Jul 2021 | BANCO BILBAO VIZCAYA ARGENTARIA, S.A.The bank was fined for failing to implement adequate security measures to verify the identity of customers accessing sensitive information through an automated phone system. The authority found a breach of data integrity and confidentiality principles. | ES | AEPD | GDPR | €200,000 | ↗ |
| 19 Dec 2024 | ENCAS ADMINISTRACIONS, S.L.ENCAS ADMINISTRACIONS, S.L. was fined 500 EUR by the AEPD. The case concerned sending emails containing personal data without proper consent, which breached data protection principles. | ES | AEPD | GDPR | €500 | ↗ |
| 01 Jan 2019 | COMUNIDAD DE PROPIETARIOS R.R.R.The community of property owners was fined by the AEPD for publicly displaying personal data taken from meeting minutes in the building elevators. The authority found that this constituted a breach of data protection rules. | ES | AEPD | GDPR | €15,000 | ↗ |
| 16 Feb 2023 | CONCENTRA CENTRAL DE COMPRAS Y SERVICIOS S.L.The entity was fined for making misleading advertising calls without explicit consent from recipients. The authority cited breaches of GDPR Articles 14 and 21(4). | ES | AEPD | GDPR | €2,000 | ↗ |
| 14 Nov 2025 | UNIVERSIDADThe university was fined EUR 200,000 by the AEPD for processing special categories of personal data, including biometric data, without proper justification. The authority also found that a data protection impact assessment had not been carried out before implementing online exams. | ES | AEPD | GDPR | €200,000 | ↗ |
| 25 Aug 2022 | COMUNIDAD PROPIETARIOS R.R.R.The community of owners COMUNIDAD PROPIETARIOS R.R.R. was fined EUR 150 by the AEPD for installing a video surveillance system in the building entrance hall without proper data protection compliance. The authority found a breach of Article 13 GDPR concerning the duty to inform data subjects. | ES | AEPD | GDPR | €150 | ↗ |
| 11 May 2022 | LA VANGUARDIA EDICIONES, S.L.LA VANGUARDIA EDICIONES, S.L. was fined by the AEPD 50,000 EUR for publishing audio of a victim's court statement in a high-profile case. The authority found excessive processing of personal data and a breach of data protection rules. | ES | AEPD | GDPR | €50,000 | ↗ |
| 05 Jul 2023 | 4T OCIO Y CAFÉ 2009, S.L.The company was fined EUR 500 by the AEPD for installing surveillance cameras without the express consent of the property owners. The authority found this to be a breach of Article 6 of the GDPR. | ES | AEPD | GDPR | €500 | ↗ |