BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 22 Apr 2024 | S.C. Tensa Art Design S.A.In April 2024, ANSPDCP completed an investigation into S.C. Tensa Art Design S.A., the operator of www.lensa.ro. The authority found GDPR violations and imposed a fine of EUR 2,000. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 23 Nov 2023 | SC Sweat Concept One SASC Sweat Concept One SA was fined 10,000 RON for failing to respond to a data subject’s request to exercise the right to erasure. The authority found a breach of the ePrivacy provisions. | RO | ANSPDCP | ePrivacy | €2,012 | ↗ |
| 25 Oct 2023 | SC Spark Car Sharing SRLANSPDCP completed an investigation in October 2023 at SC Spark Car Sharing SRL and found a breach of personal data processing principles. The company received a EUR 1,000 fine and a warning. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 11 Jul 2022 | S.C. (Sameday)S.C. (Sameday) was fined EUR 3,000 by ANSPDCP for failing to implement adequate technical and organizational security measures. The deficiency led to unauthorized access to the personal data of 26,566 individuals. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 09 Sept 2022 | SC Raiffeisen Bank SASC Raiffeisen Bank SA was fined by ANSPDCP in the amount of EUR 2,000 for violating Article 5 of the GDPR. The case concerned non-compliance with the basic principles for processing personal data set out in that provision. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Sept 2025 | S.C. PRIMONET RO S.R.L.The company was fined for a data security breach that enabled unauthorized transactions on affected cards. The incident caused financial losses to the data subjects. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 08 Nov 2022 | SC Prestige Media PHG SRLSC Prestige Media PHG SRL was fined by ANSPDCP in the amount of 5,000 EUR for breaching the data processing principles under Article 5 of the GDPR. The case concerned unlawful processing of personal data. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 26 Jun 2025 | SC Piramida Trade Invest SRLSC Piramida Trade Invest SRL received a fine of EUR 1,000 from ANSPDCP. The sanction concerns a breach of Article 6 GDPR, meaning personal data were processed without a valid legal basis. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 26 Jun 2025 | SC Piramida Trade Invest SRLSC Piramida Trade Invest SRL was fined EUR 2,000 by ANSPDCP. The case concerned a violation of Article 21 of the GDPR, which governs the right to object to data processing. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 01 May 2025 | SC Piramida Trade Invest SRLThe Romanian DPA ANSPDCP imposed a total fine of EUR 3,000 on SC Piramida Trade Invest SRL for unlawful audio-video monitoring of employees and inadequate staff information. It also found that the company failed to respond to access, erasure, and objection requests within the legal deadline; a separate email-forwarding issue resulted only in a warning. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €3,000 | ↗ |
| 13 Dec 2021 | SC Nobiotic Pharma SRLSC Nobiotic Pharma SRL was fined €2,000 by ANSPDCP for failing to respond to information requests. The authority treated this as a breach of GDPR obligations. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 18 Oct 2022 | SC Materiale Constructii Online SRLSC Materiale Constructii Online SRL was fined by ANSPDCP in the amount of EUR 2,000 for violating the General Data Protection Regulation (GDPR). The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 Jun 2025 | SC Kashto Concept SRLANSPDCP completed an investigation at SC Kashto Concept SRL and found a breach of the GDPR. The operator was fined 5,000 RON. | RO | ANSPDCP | GDPR | €995 | ↗ |
| 18 Sept 2008 | Scip ItaliaScip Italia was fined EUR 3,000 by the Garante for sending unsolicited commercial material by mail. The authority found that the company did not provide the data subject with adequate information required under the Italian Data Protection Code. | IT | Garante | GDPR | €3,000 | ↗ |
| 12 Oct 2023 | Scionti Selezioni Superiori S.r.l.Scionti Selezioni Superiori S.r.l. was fined EUR 70,000 by the Garante for failing to implement adequate measures to prevent unauthorized access to customer data. The data was then used for promotional purposes without the individuals' consent. | IT | Garante | GDPR | €70,000 | ↗ |
| 20 Jun 2022 | SC Interactions Marketing SRLSC Interactions Marketing SRL was fined EUR 1,000 by ANSPDCP for GDPR violations. The authority stated that the company acted as a processor for another controller. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 16 Jun 2020 | SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.U.SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.U. was fined by the AEPD 5,000 EUR for breaching the GDPR information obligations under Article 13. The case followed a complaint from the Madrid City Council's Consumer Unit. | ES | AEPD | GDPR | €5,000 | ↗ |
| 24 Feb 2025 | SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. was fined by the AEPD 15,000 EUR for recording gym sessions without informing participants or obtaining their consent. The authority found this to be a breach of GDPR rules on consent and personal data processing. | ES | AEPD | GDPR | €15,000 | ↗ |
| 02 Apr 2015 | Schioppetti RaffaellaSchioppetti Raffaella was fined by the Italian data protection authority, Garante, in the amount of 15,000 EUR. The sanction concerned activating phone cards in individuals' names without their knowledge, which breached data protection rules. | IT | Garante | GDPR | €15,000 | ↗ |
| 01 Feb 2022 | SC Grupex 2000 SRLSC Grupex 2000 SRL was fined by ANSPDCP for unlawfully processing the personal data of institutionalized patients. The data appeared in filmed material available on the company's website. | RO | ANSPDCP | GDPR | €1,000 | ↗ |