Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.2%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
01 Jun 2016Ordinanza ingiunzione - 1 giugno 2016 [5423590]A paramedical professional processed clients’ personal data for health purposes without providing the required privacy notice or obtaining consent. The Garante found violations of Articles 13 and 23 of the Italian Data Protection Code.ITGaranteGDPR€6,400
01 Jun 2016Azienda per i servizi sanitari n. 2 IsontinaAzienda per i servizi sanitari n. 2 Isontina was fined for unlawfully publishing personal data, including negative performance evaluations, of an individual on its institutional website. The conduct breached data protection rules.ITGaranteGDPR€4,000
01 Jun 2016Liceo Scientifico di Stato G. BattagliniLiceo Scientifico di Stato G. Battaglini was fined by the Garante 10,400 EUR for processing staff biometric data without providing the required information. The authority also found that the processing had not been notified as required by law.ITGaranteGDPR€10,400
02 Jun 2016TELEFONICA MOVILES ESPAÑA, S.A.U.Telefónica Móviles España was fined €20,000 by the AEPD for using “supercookies” without properly informing users or obtaining their consent. The authority found this conduct to be in breach of Article 22.2 of the LSSI.ESAEPDePrivacy€20,000
09 Jun 2016Angela BellavitaAngela Bellavita was fined EUR 2,400 by the Italian Garante. The case concerned the collection of personal data, including name, surname, and email address, through a website contact form without providing users with adequate information.ITGaranteGDPR€2,400
09 Jun 2016Montanaro Auto s.r.l.Montanaro Auto s.r.l. was fined by the Garante in the amount of 4,800 EUR for failing to provide data subjects with information about data processing. The breach concerned a video surveillance system and a web form, in violation of the Italian Data Protection Code.ITGaranteGDPR€4,800
09 Jun 2016Comune di LevantoThe Municipality of Levanto was fined EUR 4,000 by the Garante for publishing on its website a list of candidates for regional contributions. The disclosure of personal data lacked sufficient legal basis and breached data protection rules.ITGaranteGDPR€4,000
21 Jun 2016Česká republika – Ministerstvo školství, mládeže a tělovýchovyThe Czech Republic’s Ministry of Education, Youth and Sports was fined by the UOOU for processing sensitive personal data about students’ disabilities without a legal basis. The case indicates a breach of personal data protection rules and requires review of the lawful basis and data scope.CZUOOUGDPR€7,390
22 Jun 2016Aemme Car S.r.l.Aemme Car S.r.l. was fined by the Garante in the amount of 2,400 EUR for collecting personal data through its website without providing users with the required information notice. This conduct breached the Italian data protection code.ITGaranteGDPR€2,400
22 Jun 2016Autoverde 07 s.r.l.Autoverde 07 s.r.l. was fined by the Garante in the amount of 2,400 EUR for processing customers’ personal data through its website without providing adequate information. The authority found this to be a breach of data protection rules.ITGaranteGDPR€2,400
22 Jun 2016Istituto Maria Angelica Miliziano s.r.l.Istituto Maria Angelica Miliziano s.r.l. was fined by the Garante 2,400 EUR for collecting users’ personal data through its website without providing the required information notice. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
22 Jun 2016Società Territorio Turismo & Sport s.r.l.Società Territorio Turismo & Sport s.r.l. was fined by the Garante 2,400 EUR. The case concerned collecting personal data, including name and email, via its website without providing users with the required information notice.ITGaranteGDPR€2,400
06 Jul 2016Ordine degli Ingegneri della Provincia di CasertaOrdine degli Ingegneri della Provincia di Caserta was fined by the Garante for failing to respond to requests for information about the processing of employees’ sensitive personal data. The authority found this to be a breach of data protection rules.ITGaranteGDPR€4,000
06 Jul 2016M2G Solution s.r.l.M2G Solution s.r.l. was fined 4,000 EUR by the Garante for making promotional calls to a number listed in the public opposition register. The authority found this to be a breach of the right to object to direct marketing.ITGaranteGDPR€4,000
06 Jul 2016La Fourchette (Italy) s.r.l.La Fourchette (Italy) s.r.l. was fined EUR 10,000 by the Garante. The authority found that the company collected personal data for promotional purposes without obtaining specific consent from users.ITGaranteGDPR€10,000
06 Jul 2016Sorec s.r.l.Sorec s.r.l. was fined EUR 4,000 by the Garante for inadequate password security in its data processing systems. The case concerned non-compliance with data protection requirements.ITGaranteGDPR€4,000
06 Jul 2016Impresa Individuale Autosalone Ag. Car di Vitale AldoThe company collected personal data, including name and email address, through its website. It did not provide the required privacy notice, which breached Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400
07 Jul 2016ORANGE ESPAGNE, S.A.U.Orange Espagne, S.A.U. was fined EUR 4,100 by the AEPD for sending unsolicited advertising calls and SMS messages to a customer who had opted out of such contact. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€4,100
13 Jul 2016Italian Lab s.r.l.Italian Lab s.r.l. was fined EUR 4,000 by the Garante. The case concerned the processing of personal data for a mailing list and newsletter without obtaining user consent.ITGaranteGDPR€4,000
13 Jul 2016Istituto Scolastico Masterform s.r.l.Istituto Scolastico Masterform s.r.l. was fined EUR 2,400 by the Italian Garante. The company collected personal data through its website without providing users with the required privacy information, in breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400