Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
02 Nov 2021	MYHERITAGE, LTDMYHERITAGE, LTD was fined EUR 20,000 by the AEPD for international data transfers without adequate safeguards and for unclear legal grounds for processing. The authority also found insufficient information provided to data subjects and improper handling of genetic data.	ES	AEPD	ePrivacy	€20,000	↗
07 Apr 2021	EDICIONES TU REFORMA, S.L.EDICIONES TU REFORMA, S.L. was fined by the AEPD EUR 1,500 for sending unsolicited commercial SMS messages without the recipient's consent. This conduct breached Article 21 of the LSSI on commercial communications.	ES	AEPD	ePrivacy	€1,500	↗
24 Nov 2022	D. B.B.B.The entity was fined EUR 300 by the AEPD for installing surveillance cameras on a building facade facing public areas without prior administrative authorization. The authority found this to be a breach of Article 5(1)(c) GDPR.	ES	AEPD	GDPR	€300	↗
23 Oct 2019	CERRAJERIA VERIN S.L.CERRAJERIA VERIN S.L. was fined by the AEPD EUR 1,500 for collecting personal data without providing the required information to data subjects. The authority found a breach of Article 13 GDPR.	ES	AEPD	GDPR	€1,500	↗
24 Jun 2015	Telefónica Móviles España SAUTelefónica Móviles España SAU was fined by the AEPD 12,500 EUR for sending unauthorized commercial SMS messages. The authority also found that the company failed to provide a simple opt-out mechanism, in breach of LSSI rules.	ES	AEPD	ePrivacy	€12,500	↗
24 May 2013	ARGATEL SOLUTIONS SLARGATEL SOLUTIONS SL was fined EUR 600 by the AEPD. The sanction concerned sending unsolicited premium SMS advertisements without recipient consent, in breach of Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
24 Jan 2026	CENTRO MÉDICO REY FERNANDO, S.L.P.The entity charged a fee for providing a patient with their medical history, which breached the right of access under GDPR Article 12. The AEPD imposed a fine of 1,000 EUR.	ES	AEPD	GDPR	€1,000	↗
29 Jan 2025	SINDICATO DE LA ADMON. PÚBLICA DE LA CGT EN JEREZ Y COSTA NOROESTE DE CÁDIZThe union was fined by the AEPD for failing to comply with data protection principles and for not informing individuals about the processing of their personal data. The case indicates shortcomings in transparency and GDPR compliance obligations.	ES	AEPD	GDPR	€2,000	↗
04 Oct 2017	PRENATAL SAPRENATAL SA was fined by the AEPD EUR 20,000 for sending commercial SMS messages without providing recipients with an opt-out mechanism. The case concerns a breach of electronic communications rules and marketing consent requirements.	ES	AEPD	ePrivacy	€20,000	↗
26 Nov 2024	AD735 DATA MEDIA ADVERTISING, S.L.AD735 DATA MEDIA ADVERTISING, S.L. was fined by the AEPD EUR 10,000 for sending unsolicited advertising emails. The messages were sent despite the recipient's unsubscribe request and inclusion on the Robinson list, breaching the LSSI.	ES	AEPD	ePrivacy	€10,000	↗
04 Mar 2021	VODAFONE ESPAÑA, S.A.U.Vodafone España was fined for processing personal data without a legal basis. The company linked a prepaid phone line to an individual without consent and shared the data with law enforcement.	ES	AEPD	GDPR	€100,000	↗
14 Mar 2023	DIGIMAN ALICANTE, S.L.DIGIMAN ALICANTE, S.L. was fined 2,000 EUR by the AEPD for failing to remove an ex-employee’s image from its YouTube channel despite repeated requests. The authority found a breach of GDPR Article 6(1) regarding the lawful basis for processing personal data.	ES	AEPD	GDPR	€2,000	↗
13 Sept 2024	DIGITAL PHOTO IMAGE, S.A.DIGITAL PHOTO IMAGE, S.A. was fined EUR 20,000 by the AEPD for breaching the LSSI. The company sent emails without providing recipients with a valid means to exercise their right to stop receiving such communications.	ES	AEPD	ePrivacy	€20,000	↗
01 Jan 2024	ESCOLA LES CAROLINES COOP. V.The school was fined by the AEPD 10,000 EUR for processing a minor’s image without a lawful basis. The child’s photograph was displayed on posters inside the school premises, which was found to breach GDPR Article 6(1).	ES	AEPD	GDPR	€10,000	↗
26 Apr 2023	CARTONAJES BAÑERES, S.A.CARTONAJES BAÑERES, S.A. was fined by the AEPD 220,000 EUR for processing biometric data without the required data protection impact assessment. The authority also found a failure to comply with data subjects’ access rights.	ES	AEPD	GDPR	€220,000	↗
23 Jan 2024	CAIXA POPULAR - CAIXA RURAL SOC. COOP. DE CRÉDITO VCAIXA POPULAR was fined EUR 35,000 by the AEPD for a personal data breach. The incident allowed unauthorized third-party access and affected the confidentiality and integrity of the data.	ES	AEPD	GDPR	€35,000	↗
01 Jan 2024	ACTIVOS INTELIGENTES, S.L.ACTIVOS INTELIGENTES, S.L. was fined by the AEPD 5,000 EUR for requiring guests to submit selfies with their ID cards during check-in. The authority found the data collection excessive and not properly justified or explained in terms of processing purposes.	ES	AEPD	GDPR	€5,000	↗
01 Jan 2021	JUBASER DE CONTROL, S.L.JUBASER DE CONTROL, S.L. was fined by the AEPD 5,000 EUR for unlawful processing of personal data. The case concerned improper handling of a customer's ID and personal information, which later appeared on an adult contact website.	ES	AEPD	GDPR	€5,000	↗
10 Apr 2023	COLEGIO OFICIAL DE ARQUITECTOS DE GRANADACOLEGIO OFICIAL DE ARQUITECTOS DE GRANADA was fined €14,000 by the AEPD for data protection breaches. The authority found a conflict of interest in the appointment of the Data Protection Officer, missing required information on data processing in complaint forms, and the use of third-party cookies without user consent.	ES	AEPD	ePrivacy	€14,000	↗
06 Jun 2024	MÁRMOLES Y GRANITOS MEJIAS, S. L.The entity was fined by the AEPD for operating a video surveillance system with cameras directed toward public areas without the required administrative authorization. It also failed to provide legally compliant informational signage.	ES	AEPD	GDPR	€1,000	↗

Fine Tracker.