BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 03 Sept 2025 | SheinCNIL imposed a 176,000,000 USD fine on Shein for using cookies without valid user consent. The case concerns breaches of consent and transparency requirements for online tracking. | FR | CNIL | ePrivacy | €151,034,000 | ↗ |
| 14 Sept 2023 | Shardana Working Soc. Coop. a r.l.Shardana Working Soc. Coop. a r.l. was fined by the Garante 20,000 EUR for failing to fully comply with data access requests. The authority found a breach of Article 15 GDPR. | IT | Garante | GDPR | €20,000 | ↗ |
| 01 Jan 2018 | SHANA RETAIL S.L.SHANA RETAIL S.L. was fined by the AEPD for improperly disposing of documents containing personal data. The breach concerned data protection rules and the need to prevent unauthorized disclosure of information. | ES | AEPD | GDPR | €15,000 | ↗ |
| 21 Sept 2023 | SGS Home Protect LtdSGS Home Protect Ltd made 24,214 marketing calls to individuals in breach of regulation 21 of PECR. The ICO imposed a fine of 70,000 GBP and issued an enforcement notice. | GB | ICO | ePrivacy | €80,724 | ↗ |
| 01 Jan 2025 | SGKLegalThe Greek data protection authority, ΑΠΔΠΧ, imposed a fine of EUR 22,000 on SGKLegal for a GDPR violation. The case involved recorded conversations and deficiencies in personal data protection compliance. | GR | Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (ΑΠΔΠΧ) | GDPR | €22,000 | ↗ |
| 14 Mar 2013 | Sfera s.r.l.Sfera s.r.l. was fined by the Garante 2,400 EUR for collecting personal data through a website form without providing the required privacy notice. The conduct breached the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 23 Feb 2021 | SFAM ESPAÑA GENERAL S.L.SFAM ESPAÑA GENERAL S.L. was fined by the AEPD in the amount of 5,000 EUR. The case concerned unauthorized charges to a customer's bank account after a purchase, raised in a complaint about data misuse. | ES | AEPD | GDPR | €5,000 | ↗ |
| 02 Mar 2011 | Sestrieres S.p.A.Sestrieres S.p.A. was fined by the Italian Garante for failing to provide adequate information to individuals about the processing of their personal data when using ski lift turnstiles. The authority found a breach of data protection rules. | IT | Garante | GDPR | €12,000 | ↗ |
| 21 Jan 2010 | Servizi sanitari s.r.l. – Istituto cardiovascolare CamogliServizi sanitari s.r.l. was fined by the Garante 10,000 EUR for violations related to the processing of personal data without the required notification. The case concerned obligations under the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 06 Oct 2022 | Servizio Idrico Integrato S.c.p.a.Servizio Idrico Integrato S.c.p.a. was fined by the Garante EUR 15,000 for failing to implement adequate security measures to protect the personal data of users registered on its website. The case concerned insufficient safeguards for data processed online. | IT | Garante | GDPR | €15,000 | ↗ |
| 01 Oct 2013 | SERVITEL TEXNOX S.L.SERVITEL TEXNOX S.L. was fined EUR 600 by the AEPD for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €600 | ↗ |
| 27 Sept 2016 | SERVIHABITAT SERVICIOS INMOBILIARIOS, S.L.SERVIHABITAT SERVICIOS INMOBILIARIOS, S.L. was fined by the AEPD EUR 2,000 for sending unsolicited commercial communications by email. The authority found this breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Jan 2015 | SERVICIOS VARIOS 8020, S.L.SERVICIOS VARIOS 8020, S.L. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited commercial emails. The messages did not include an unsubscribe option for recipients, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 20 May 2022 | SERVICIOS PROFESIONALES LA PARADA S.L.The entity installed a video surveillance system that recorded public areas without informing the affected individuals. This breached data protection rules and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €800 | ↗ |
| 19 Feb 2021 | SERVICIOS LOGÍSTICOS MARTORELL SIGLO XXI, S.L.The company was fined by the AEPD for deploying a biometric fingerprint system for employee attendance control without carrying out a data protection impact assessment. The authority found this to be a breach of Article 35 GDPR because the processing involved biometric data requiring prior risk assessment. | ES | AEPD | GDPR | €20,000 | ↗ |
| 18 May 2022 | SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.The company was fined by the AEPD for unlawfully processing personal data. The breach involved sending a wage garnishment notice via WhatsApp without proper authorization or legal basis. | ES | AEPD | GDPR | €5,000 | ↗ |
| 16 Apr 2025 | SERVICIOS INMOBILIARIOS Y GESTIÓN RCL-MADRID, S.L.SERVICIOS INMOBILIARIOS Y GESTIÓN RCL-MADRID, S.L. was fined 600 EUR by the AEPD. The authority found that the company did not provide access to personal data and other information requested during the investigation. The conduct breached Article 58(1) of the GDPR. | ES | AEPD | GDPR | €600 | ↗ |
| 17 Jan 2022 | SERVICIOS FINANCIEROS CARREFOUR, EFC., S.A.SERVICIOS FINANCIEROS CARREFOUR, EFC., S.A. was fined 20,000 EUR by the AEPD. The authority found that the company failed to properly handle a data subject’s request for erasure, which led to continued processing of personal data despite the prior deletion request. | ES | AEPD | GDPR | €20,000 | ↗ |
| 06 Aug 2025 | SERVICIOS FINANCIEROS CARREFOUR, E.F.C., S.ASERVICIOS FINANCIEROS CARREFOUR, E.F.C., S.A suffered a data breach involving unauthorized access to and exfiltration of customer personal data, including payment information. The incident was linked to phishing and account compromise, resulting in the loss of sensitive data. | ES | AEPD | GDPR | €2,500,000 | ↗ |
| 25 Feb 2025 | SERVICIOS ESPECIALES, S.A.SERVICIOS ESPECIALES, S.A. was fined by the AEPD 200,000 EUR for disclosing the identity of a complainant in a workplace harassment case. The authority found a breach of personal data confidentiality principles. | ES | AEPD | GDPR | €200,000 | ↗ |