BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 08 Aug 2024 | SOCIETE DE COURTAGE EN ENERGIE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on SOCIETE DE COURTAGE EN ENERGIE and issued an injunction. The case was handled under a simplified procedure. | FR | CNIL | GDPR | €20,000 | ↗ |
| 08 Aug 2024 | PUERTO FOGONES SLPUERTO FOGONES SL was fined EUR 2,000 by the AEPD. The authority found a breach for failing to provide access to information as required under Article 58.1 of the GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 08 Aug 2024 | OAC LOGÍSTICA, S.L.OAC LOGÍSTICA, S.L. was fined by the AEPD in the amount of EUR 600 for failing to provide access. The breach concerned Article 58(1) of the GDPR. | ES | AEPD | GDPR | €600 | ↗ |
| 07 Aug 2024 | EXPANSION CONSULTING 2020, S.L.EXPANSION CONSULTING 2020, S.L. was fined by the AEPD in the amount of €4,000 for failing to provide access to personal data and the information requested by the data protection authority. The case concerned non-compliance with Article 58(1) GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 06 Aug 2024 | Fiziska personaA monetary fine of EUR 100 was imposed. The decision is final and has entered into force. | LV | DVI | GDPR | €100 | ↗ |
| 06 Aug 2024 | BEST ELAN ONLINE SRLBEST ELAN ONLINE SRL was fined €1,000 for GDPR violations. The company was also required to provide the ANSPDCP with all requested information and documents. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 31 Jul 2024 | Hangrögzítés telefonos ügyfélszolgálatonThe authority imposed a fine for breaching the GDPR principles of transparency and accountability. The entity did not adequately inform callers that customer service phone calls were being recorded. | HU | NAIH | GDPR | €2,530 | ↗ |
| 31 Jul 2024 | CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO, S.A.U.Curenergía was fined by the AEPD for processing personal data without a proper legal basis. The company used former customer data without full consent in connection with a new contract. | ES | AEPD | GDPR | €100,000 | ↗ |
| 30 Jul 2024 | NUDE PROJECT, S.L.NUDE PROJECT, S.L. was fined EUR 20,000 by the AEPD for sending unsolicited advertising emails to a customer without obtaining explicit consent. The authority found this conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 29 Jul 2024 | IBERINFORMIBERINFORM was fined by the AEPD €1,000,000 for processing personal data of self-employed individuals without a proper legal basis. The authority also found that the data were used beyond professional relationships, including for marketing and online exposure. | ES | AEPD | GDPR | €1,000,000 | ↗ |
| 25 Jul 2024 | ETABLISSEMENT D'ENSEIGNEMENT SUPERIEUR PRIVE (procédure simplifiée)The CNIL imposed an administrative fine of EUR 20,000 on ETABLISSEMENT D'ENSEIGNEMENT SUPERIEUR PRIVE under a simplified procedure. The case concerned a confirmed breach of rules supervised by the CNIL. | FR | CNIL | GDPR | €20,000 | ↗ |
| 24 Jul 2024 | MONUMENTAL FORMA SPORT, S.L.MONUMENTAL FORMA SPORT, S.L. was fined EUR 5,000 by the AEPD for sending unsolicited commercial SMS messages without recipient consent. The case concerned Article 21 of the LSSI, which requires prior consent for electronic marketing communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 24 Jul 2024 | CAMDEN TAPAS C.B.CAMDEN TAPAS C.B. was fined by the AEPD EUR 500 for installing a surveillance camera that captured public areas. The authority also noted the possible sharing of footage on Facebook, which breached data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 24 Jul 2024 | FREE TECHNOLOGIES EXCOM, S.L.FREE TECHNOLOGIES EXCOM, S.L. was fined by the AEPD 10,000 EUR for sending unencrypted emails containing user credentials without prior notice. The authority also noted the absence of two-factor authentication, which constituted a breach of Article 32 GDPR. | ES | AEPD | GDPR | €10,000 | ↗ |
| 23 Jul 2024 | SIA "Piesēst"A fine of EUR 500 was imposed on SIA "Piesēst" by the DVI. The decision is final and has entered into force. | LV | DVI | GDPR | €500 | ↗ |
| 23 Jul 2024 | VOLTIUM CONSULTORES 2020, S.L.VOLTIUM CONSULTORES 2020, S.L. was fined by the AEPD in the amount of EUR 600 for failing to provide access to information under Article 58(1) of the GDPR. The case concerns a breach of cooperation and transparency obligations toward the supervisory authority. | ES | AEPD | GDPR | €600 | ↗ |
| 22 Jul 2024 | COMMUNECNIL imposed EUR 6,900 on COMMUNE as an astreinte liquidation. The case concerns enforcement of a prior obligation subject to supervisory authority action. | FR | CNIL | GDPR | €6,900 | ↗ |
| 18 Jul 2024 | SIA "Doner King"A fine of EUR 500 was imposed on SIA "Doner King" by the DVI. The decision is final and has entered into force. | LV | DVI | GDPR | €500 | ↗ |
| 17 Jul 2024 | Iliad Italia S.p.A.Iliad Italia S.p.A. was fined EUR 50,000 by the Garante for sending promotional emails without obtaining proper customer consent. The authority found this conduct to be a breach of GDPR rules on electronic marketing. | IT | Garante | GDPR | €50,000 | ↗ |
| 17 Jul 2024 | IstitutoThe Garante fined Istituto EUR 10,000 for violations related to the processing of personal data in the context of medical and scientific research. The authority found that retention periods were not defined and transparency toward data subjects was insufficient. | IT | Garante | GDPR | €10,000 | ↗ |