BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 20 Sept 2012 | Policlinico Sassarese s.p.a.Policlinico Sassarese s.p.a. was fined EUR 64,000 by the Garante for inadequate data protection measures. The authority cited insufficient video surveillance notices and missing consent documentation for the processing of sensitive data. | IT | Garante | GDPR | €64,000 | ↗ |
| 05 Nov 2015 | Enterprise Service s.r.l.Enterprise Service s.r.l. was fined EUR 62,000 by the Garante. The sanction concerned sending unsolicited promotional faxes without prior consent, in breach of privacy rules. | IT | Garante | GDPR | €62,000 | ↗ |
| 22 Jun 2017 | Bookingshow s.p.a.Bookingshow s.p.a. was fined EUR 62,000 by the Garante for unlawfully processing personal data. The company required mandatory consent for promotional purposes during online ticket purchases, which breached data processing rules. | IT | Garante | GDPR | €62,000 | ↗ |
| 09 May 2018 | Mercuri SalvatoreMercuri Salvatore was fined by the Garante EUR 60,000 for making unsolicited promotional calls to individuals whose phone numbers were listed in the opposition register. This conduct infringed their right to object to such communications. | IT | Garante | GDPR | €60,000 | ↗ |
| 27 Oct 2014 | TRADEINN RETAIL SERVICES, S.L.TRADEINN RETAIL SERVICES, S.L. was fined EUR 60,000 by the AEPD for sending unsolicited commercial emails to a non-customer. The authority found this breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €60,000 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES, S.A. (YOIGO)XFERA MÓVILES, S.A. (YOIGO) was fined by the AEPD EUR 60,000 for incorrectly including personal data in a creditworthiness file. The authority found a breach of the GDPR accuracy principle under Article 5(1)(d). | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | AVON COSMETICS SAUAVON COSMETICS SAU was fined by the AEPD 60,000 EUR for improper processing of personal data. The company included an individual in a creditworthiness file without first verifying the person’s identity. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | VIAQUA XESTIÓN INTEGRAL DE AUGAS DE GALICIA, S.A.The company changed contract data without authorization, which constituted a breach of Article 6 of the GDPR. The AEPD imposed a fine of 60,000 EUR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 12 Apr 2018 | ABC OROLOGERIA E TELEFONIA S.r.l.ABC OROLOGERIA E TELEFONIA S.r.l. was fined by the Garante in the amount of 60,000 EUR for activating SIM cards without the express consent of the individuals to whom the cards were registered. The case concerns a breach of data protection rules. | IT | Garante | GDPR | €60,000 | ↗ |
| 19 Dec 2024 | Altroconsumo Edizioni S.r.l.Altroconsumo Edizioni S.r.l. was fined by the Garante EUR 60,000 for sending unsolicited marketing emails despite unsubscribe requests. The authority also found deficiencies in obtaining valid consent and in the handling of personal data by third-party affiliates involved in the campaign. | IT | Garante | GDPR | €60,000 | ↗ |
| 10 Oct 2013 | TeleTu s.p.a.TeleTu s.p.a. was fined 60,000 EUR by the Italian Garante. The sanction concerned unsolicited promotional phone calls made without the required consent of the data subject. | IT | Garante | GDPR | €60,000 | ↗ |
| 22 Dec 2023 | HISPAPOST, S.A.HISPAPOST, S.A. was fined EUR 60,000 by the AEPD for failing to properly safeguard and handle personal data. The incident resulted in the abandonment of 1,404 letters containing personal information, indicating inadequate data protection procedures. | ES | AEPD | GDPR | €60,000 | ↗ |
| 25 Jan 2018 | Provincia di Reggio CalabriaProvincia di Reggio Calabria was fined by the Garante 60,000 EUR for publishing special-category personal data, including health information, on its institutional website. The disclosure breached data protection rules and triggered supervisory enforcement. | IT | Garante | GDPR | €60,000 | ↗ |
| 14 Apr 2025 | DPP Law LtdThe UK Information Commissioner fined law firm DPP Law Ltd 60,000 GBP for breaches of Articles 5(1)(f), 32(1), 32(2) and 33(1) of the UK GDPR. The infringements occurred between 25 May 2018 and 17 July 2022. The case concerned inadequate security measures and incident reporting obligations. | GB | ICO | GDPR | €69,456 | ↗ |
| 18 Feb 2021 | INFORMÁTICA MÉDICA, S.L.INFORMÁTICA MÉDICA, S.L. was fined by the AEPD 60,000 EUR for failing to have a proper data processing agreement with its processor, OUTENUVE. The authority treated this as a breach of Article 28 GDPR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 18 Jan 2018 | C.S. GROUP S.p.a.C.S. GROUP S.p.a. was fined by the Italian Garante in the amount of €60,000. The case concerned profiling and the processing of personal data without a proper legal basis in connection with vehicle rental services. | IT | Garante | GDPR | €60,000 | ↗ |
| 25 Jan 2018 | Avis Budget Italia s.p.a.Avis Budget Italia s.p.a. was fined EUR 60,000 by the Garante for improper installation and notification of geolocation devices on its vehicle fleet. The authority found that the company did not comply with data protection requirements. | IT | Garante | GDPR | €60,000 | ↗ |
| 01 Jan 2020 | XFERA MÓVILES, S.A. (MASMOVIL)XFERA MÓVILES, S.A. (MASMOVIL) was fined by the AEPD for processing personal data without a lawful basis, in breach of Article 6 GDPR. The case indicates that the company lacked a valid legal ground for the processing activity. | ES | AEPD | GDPR | €60,000 | ↗ |
| 02 Dec 2021 | Teaching CouncilThe Irish DPC fined Teaching Council EUR 60,000 in inquiry IN-20-4-1. The fine has been collected. | IE | DPC | GDPR | €60,000 | ↗ |
| 17 May 2023 | Fabio Giovanni PettaFabio Giovanni Petta was fined by the Garante 60,000 EUR for the unauthorized publication of personal data, including names, addresses, and phone numbers, on www.trovanumeri.com. The authority also noted continued processing of the data despite a prior prohibition. The case constitutes a GDPR violation. | IT | Garante | GDPR | €60,000 | ↗ |