BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Sept 2024 | Ordine delle Professioni Infermieristiche di GoriziaThe Garante imposed a fine of EUR 5,000 on the Ordine delle Professioni Infermieristiche di Gorizia for breaches of data protection rules. The case concerned non-compliance with requirements governing the processing of personal data. | IT | Garante | GDPR | €5,000 | ↗ |
| 12 Sept 2024 | Provvedimento del 12 settembre 2024 [10065894]The Garante imposed a EUR 400 fine for the improper installation of surveillance cameras oriented toward private residences. The conduct breached privacy and personal data protection rules. | IT | Garante | GDPR | €400 | ↗ |
| 12 Sept 2024 | Ordine delle Professioni Infermieristiche di TriesteThe Garante fined the Ordine delle Professioni Infermieristiche di Trieste EUR 4,000 for breaches of data protection rules. The case involved improper disclosure of data to third parties and a failure to provide adequate information to data subjects. | IT | Garante | GDPR | €4,000 | ↗ |
| 12 Sept 2024 | B.B.B.B.B.B. was fined by the AEPD €4,000 for failing to properly inform individuals about the presence of surveillance cameras. The authority also found the surveillance system disproportionate because it recorded audio and retained images longer than permitted. | ES | AEPD | GDPR | €4,000 | ↗ |
| 12 Sept 2024 | Ordine delle Professioni Infermieristiche di PordenoneOrdine delle Professioni Infermieristiche di Pordenone was fined 6,000 EUR by the Garante for breaching data protection rules. The authority found that the organization mishandled a data subject request and failed to respect privacy rights. | IT | Garante | GDPR | €6,000 | ↗ |
| 12 Sept 2024 | Sky Italia S.r.l.Sky Italia S.r.l. was fined EUR 842,062 by the Garante for telemarketing violations. The authority found that the company contacted individuals without proper consent and failed to consult the Public Register of Objections before promotional campaigns. | IT | Garante | GDPR | €842,000 | ↗ |
| 11 Sept 2024 | KVIKU SPAIN, S.L.KVIKU SPAIN, S.L. was fined by the AEPD for failing to provide access to personal data and information requested by the data protection authority. The case concerned non-compliance with Article 58.1 of the GDPR. | ES | AEPD | GDPR | €1,200 | ↗ |
| 11 Sept 2024 | NEGOCIOS R&R 2020 S.L.NEGOCIOS R&R 2020 S.L. was fined by the AEPD 12,000 EUR for failing to provide access under Article 58(1) of the GDPR. The authority treated this as a serious breach of data protection obligations. | ES | AEPD | GDPR | €12,000 | ↗ |
| 11 Sept 2024 | Universitetet i AgderThe Norwegian DPA, Datatilsynet, fined the University of Agder 150,000 NOK for failing to implement adequate measures to protect personal data in Microsoft Teams. The incident exposed sensitive information relating to around 16,000 individuals. | NO | Datatilsynet | GDPR | €12,566 | ↗ |
| 10 Sept 2024 | Fundația Pro Economica – Pro Economica AlapítványThe foundation was fined EUR 1,000 by ANSPDCP after a data security incident caused by a cyberattack. The attack led to the deletion of personal data from its server, affecting data availability. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 10 Sept 2024 | Okmánymásolat feltöltését is előíró regisztrációs folyamattal és regisztrációs adatbázissal kapcsolatos jogellenes adatkezelésThe authority imposed a fine for negligent GDPR violations between December 2021 and November 2023. The breaches concerned transparency and data processing principles in connection with the registration process and the registration database. | HU | NAIH | GDPR | €189,000 | ↗ |
| 10 Sept 2024 | HWM PSI, S.L.HWM PSI, S.L. was fined by the AEPD 100 EUR for sending an email to multiple recipients without using BCC. This exposed recipients’ personal email addresses and breached data protection rules. | ES | AEPD | GDPR | €100 | ↗ |
| 06 Sept 2024 | GESTIÓN DE VENTAS IBERIA S.L.GESTIÓN DE VENTAS IBERIA S.L. was fined 4,000 EUR by the AEPD for failing to provide access as required under Article 58.1 of the GDPR. The case concerns non-compliance with a supervisory authority request. | ES | AEPD | GDPR | €4,000 | ↗ |
| 05 Sept 2024 | SOCIETE SPECIALISEE DANS L’EDITION ET LA VENTE DE LOGICIELS DE GESTION AUX MEDECINSThe CNIL imposed an administrative fine of EUR 800,000 on SOCIETE SPECIALISEE DANS L’EDITION ET LA VENTE DE LOGICIELS DE GESTION AUX MEDECINS. The case concerns a breach of rules supervised by the CNIL. | FR | CNIL | GDPR | €800,000 | ↗ |
| 05 Sept 2024 | SOCIETE SPECIALISEE DANS LAFABRICATION ET POSE DE CLOTURES (procédure simplifiée)The CNIL imposed an administrative fine of EUR 10,000 on SOCIETE SPECIALISEE DANS LAFABRICATION ET POSE DE CLOTURES and issued an injunction. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €10,000 | ↗ |
| 05 Sept 2024 | SOCIETE AYANT POUR ACTIVITE LE COMMERCE DE DETAIL D'HABILLEMENT (procédure simplifiée)CNIL imposed an administrative fine of 15,000 EUR on SOCIETE AYANT POUR ACTIVITE LE COMMERCE DE DETAIL D'HABILLEMENT under a simplified procedure. The case concerned a breach of rules supervised by CNIL. | FR | CNIL | GDPR | €15,000 | ↗ |
| 04 Sept 2024 | Agrotikos Elaiourgikos Synetairismos StylidasAgrotikos Elaiourgikos Synetairismos Stylidas was fined EUR 2,000 by the HDPA. The authority found breaches of data minimization and transparency principles, as well as inadequate technical and organizational measures in its video surveillance system. | GR | HDPA | GDPR | €2,000 | ↗ |
| 03 Sept 2024 | Clearview AI Inc.Clearview AI Inc. was fined by the Dutch data protection authority AP for processing personal data without a legal basis, including biometric data. The authority also cited inadequate notice to data subjects, failure to respond to access requests, and failure to appoint an EU representative. | NL | AP | GDPR | €30,500,000 | ↗ |
| 02 Sept 2024 | Prokuraturę KrajowąUODO imposed an administrative fine of 85,000 PLN on the National Prosecutor's Office for breaches of Article 6(1), Article 9(1), Article 33(1), and Article 34(1) and (2) of the GDPR. The authority also ordered notification of the affected data subjects. | PL | UODO | GDPR | €19,883 | ↗ |
| 30 Aug 2024 | Dane anonimowe (Panią A. K., prowadzącą działalność gospodarczą pod firmą B. w M. przy ul.)The President of the Personal Data Protection Office imposed an administrative fine on an individual conducting business activity. The sanction resulted from failure to cooperate with the authority and from not providing access to personal data and information necessary for its tasks. | PL | UODO | GDPR | €4,594 | ↗ |