BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 Jan 2024 | CAJA RURAL REGIONAL SAN AGUSTÍN, S.C.C.CAJA RURAL REGIONAL SAN AGUSTÍN was fined by the AEPD 15,000 EUR for breaching data protection principles. The authority found that unauthorized access to personal data occurred due to a security incident, affecting confidentiality and integrity. | ES | AEPD | GDPR | €15,000 | ↗ |
| 22 Nov 2024 | CLUB BALONCESTO TELDEClub Baloncesto Telde was fined for publishing images of a minor on social media without obtaining the required consent. The authority found a breach of Article 6(1) of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 13 Mar 2023 | JUNTA MAYOR DE COFRADÍAS Y HERMANDADES DE LA SEMANA SANTA DE ELCHEThe organization did not inform participants about the processing of their personal data during the “Gymkhana Cofrade” event, which constitutes a breach of Article 13 GDPR. The AEPD imposed a fine of 1,000 EUR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 21 Jul 2023 | ATLAS ENTERTAINMENT, S.L.ATLAS ENTERTAINMENT, S.L. did not comply with a data subject’s request to delete personal data. The AEPD imposed a fine of EUR 1,000 for the GDPR breach. | ES | AEPD | GDPR | €1,000 | ↗ |
| 13 Nov 2014 | GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD 20,000 EUR for continuing to send commercial emails after the user requested deletion of personal data and opted out of communications. The case indicates a failure to respect the data subject’s withdrawal of consent and request to stop marketing processing. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 01 Jan 2022 | DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 70,000 EUR for processing personal data without consent. The breach led to unauthorized access to personal data and fraudulent financial transactions. | ES | AEPD | GDPR | €70,000 | ↗ |
| 02 Feb 2022 | SUPERCOR, S.A.SUPERCOR, S.A. was fined by the AEPD for using surveillance cameras in employee rest areas without proper notification. The authority found this conduct to be in breach of GDPR Article 6. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2023 | VODAFONE ESPAÑA, S.A.U.Vodafone España was fined by the AEPD 200,000 EUR for making commercial calls to a complainant despite the numbers being on the Robinson list. The case indicates a breach of data protection rules governing direct marketing. | ES | AEPD | GDPR | €200,000 | ↗ |
| 18 Dec 2018 | ORGANIZACION NACIONAL DE CIEGOS (ONCE)ONCE was fined EUR 40,000 by the AEPD for sending more than 200 unsolicited commercial emails without prior consent. The authority found this to be a breach of Article 21 of the LSSI governing electronic marketing communications. | ES | AEPD | ePrivacy | €40,000 | ↗ |
| 25 Oct 2025 | TELECONTACT LIST S.L.TELECONTACT LIST S.L. was fined 1,000 EUR by the AEPD for failing to respond to a data subject’s request for access to and deletion of personal data. The authority found a breach of Article 15 of the GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 26 Sept 2023 | TITAN STRONG, S.L.TITAN STRONG, S.L. was fined EUR 500 by the AEPD for installing surveillance cameras that captured excessive images of public areas without prior authorization. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 12 Apr 2024 | TECNOCRÁTICA CENTRO DE DATOS S.L.TECNOCRÁTICA CENTRO DE DATOS S.L. was fined by the AEPD for failing to provide access to personal data and information requested during an investigation. The authority found a breach of Article 58.1 of the GDPR. | ES | AEPD | GDPR | €6,000 | ↗ |
| 01 Jan 2014 | EASY CUT FRANQUICIA, S.L.EASY CUT FRANQUICIA, S.L. was fined by the AEPD 4,100 EUR for sending unsolicited commercial emails. The recipient had previously requested that such communications stop, but the emails continued. This constituted a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €4,100 | ↗ |
| 03 Feb 2021 | NBQ TECHNOLOGY, S.A.U.NBQ TECHNOLOGY, S.A.U. was fined by the AEPD 40,000 EUR for processing personal data without a legal basis. The case was linked to a denied financial operation following an identity theft incident. | ES | AEPD | GDPR | €40,000 | ↗ |
| 16 Jun 2023 | B.B.B.The entity was fined for installing a surveillance camera in a rented property without informing the tenant. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €5,300 | ↗ |
| 13 Jan 2022 | IBERDROLA CLIENTES, S.A.U.IBERDROLA CLIENTES, S.A.U. was fined EUR 70,000 by the AEPD for changing an electricity supply contract without the customer's knowledge or consent. The authority found that this conduct breached data protection rules. | ES | AEPD | GDPR | €70,000 | ↗ |
| 13 Feb 2015 | COMERCIAL POLINDUS, 21, S.L.COMERCIAL POLINDUS, 21, S.L. was fined by the AEPD 3,000 EUR for sending unsolicited commercial communications. The case concerned Article 21 of the LSSI, which prohibits such messages without prior recipient consent. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 19 Jan 2023 | TRC TRUCKS 2020, S.L.TRC TRUCKS 2020, S.L. was fined EUR 1,000 by the AEPD for failing to respond to a data subject’s request for erasure. The case concerns non-compliance with GDPR obligations relating to the exercise of data subject rights. | ES | AEPD | GDPR | €1,000 | ↗ |
| 18 Dec 2024 | GAOLANIA SERVICIOS, S.L.GAOLANIA SERVICIOS, S.L. was fined EUR 30,000 by the AEPD for breaching the GDPR data accuracy principle under Article 5(1)(d). The authority found a lack of diligence in handling data errors. | ES | AEPD | GDPR | €30,000 | ↗ |
| 15 Apr 2025 | LVMH IBERIA, S.L.LVMH IBERIA, S.L. was fined by the AEPD 70,000 EUR for adding an employee’s personal phone number to a WhatsApp group without consent. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €70,000 | ↗ |