Order report
BULLETIN №081Last updated · 26 Jul 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
18 Jan 2017Anonymizováno (ÚOOÚ UOOU-01178/17-265)The company was fined for repeatedly sending unsolicited commercial communications without a legal basis. The case concerned a breach of the Czech law on certain information society services.CZUOOUePrivacy€14,064↗
10 Apr 2019Anonymizováno (ÚOOÚ UOOU-06298/18-38)The entity was fined for repeatedly sending commercial communications without recipients’ consent. This breached § 7(2) of the Czech Act on Certain Information Society Services.CZUOOUePrivacy€1,406↗
25 May 2018Anonymizováno (ÚOOÚ UOOU-07350/18-21)The entity was fined 50,000 CZK by UOOU for failing to provide the necessary cooperation during an inspection. The breach concerned the legal duty to assist the supervisory authority.CZUOOUGDPR€1,941↗
18 Apr 2018Anonymizováno (ÚOOÚ UOOU-09774/17-25)The entity was fined for processing personal data of hundreds of thousands of individuals without consent or another legal basis. The authority found this to be a breach of § 5(2) of the Czech Data Protection Act.CZUOOUGDPR€31,616↗
20 Feb 2018Anonymizováno (ÚOOÚ UOOU-12027/17-24)The entity was fined CZK 20,000 for disclosing sensitive personal data of a witness and a victim in a criminal case during a TV report. The authority found that the processing took place without explicit consent and without a valid legal exception.CZUOOUGDPR€790↗
22 Dec 2020Anonymizováno (ÚOOÚ UOOU-004103/19-31)The company was fined for unlawfully processing personal data of members of homeowners' associations by publishing the data on its website without consent. The authority found this conduct to be in breach of the GDPR.CZUOOUGDPR€1,141↗
19 Jul 2018Anonymizováno (ÚOOÚ UOOU-00944/18-13)The entity processed sensitive personal data about users’ sexual orientation on a website without a valid legal basis. It also failed to provide the required information to data subjects, which breached Czech data protection rules.CZUOOUGDPR€386↗
14 May 2020Anonymizováno (ÚOOÚ spr-563809-118)The entity was fined for operating a camera system without meeting the information obligations required under Czech data protection law. The case concerns a breach of transparency duties toward individuals subject to surveillance.CZUOOUGDPR€145↗
15 Sept 2015Revírní bratrská pokladna, zdravotní pojišťovnaRevírní bratrská pokladna, zdravotní pojišťovna was fined by the UOOU 5,000 CZK for processing inaccurate personal data of an insured person without their knowledge. The case concerns a breach of data protection duties and the requirement to process data accurately.CZUOOUGDPR€185↗
15 Dec 2021Anonymizováno (ÚOOÚ UOOU-01071/21-30)The entity was fined by the UOOU for repeatedly sending unsolicited commercial communications to electronic contacts without prior consent. The messages also failed to clearly identify the sender or label the content as commercial.CZUOOUePrivacy€11,871↗
28 Jul 2020Anonymizováno (ÚOOÚ UOOU-05226/19-22)The entity was fined for publishing personal data of court proceeding participants on a website. The authority found this to be a breach of data protection law.CZUOOUGDPR€1,905↗
23 Mar 2021Anonymizováno (ÚOOÚ UOOU-00681/20-18)The entity was fined for sending unsolicited commercial communications by email without the recipients' consent. This breached Czech electronic communications rules.CZUOOUePrivacy€382↗
13 Dec 2018Anonymizováno (ÚOOÚ UOOU-08001/18-14)The entity was fined 40,000 CZK by the UOOU for insufficient security measures in the processing of personal data. The authority cited inadequate audit logs and a lack of regular access checks to electronic health records.CZUOOUGDPR€1,549↗
11 Dec 2018Anonymizováno (ÚOOÚ UOOU-00313/19-23)The supervisory authority found that the entity failed to implement adequate technical and organizational measures to secure personal data processing and did not properly inform data subjects. Personal data of loan applicants were retained longer than necessary, in breach of the GDPR.CZUOOUGDPR€3,869↗
31 Mar 2021Anonymizováno (ÚOOÚ UOOU-04077/20-13)The entity was fined for processing personal data from public registers without a legal basis and for failing to respond to a data subject's erasure request. The case highlights deficiencies in lawful processing and in handling data subject rights.CZUOOUGDPR€4,590↗
09 Feb 2023Anonymizováno (ÚOOÚ UOOU-04020/22-13)The entity was fined for repeatedly sending unsolicited commercial communications by electronic means without recipients' consent. The authority found a breach of Czech rules on information society services.CZUOOUePrivacy€1,688↗
08 Jul 2022Anonymizováno (ÚOOÚ UOOU-03988/20-54)The entity was fined for processing personal data without a legal basis. The infringement involved sending unsolicited offers using data obtained from the business register.CZUOOUGDPR€2,844↗
19 Nov 2018Anonymizováno (ÚOOÚ UOOU-04674/18-33)The entity was fined for repeatedly sending unsolicited commercial communications to email addresses without the recipients’ consent. The authority found a breach of Czech rules on information society services.CZUOOUePrivacy€577↗
21 Oct 2019Anonymizováno (ÚOOÚ UOOU-02928/19-13)The entity was fined for publishing personal data related to criminal proceedings on its website. The authority found a breach of GDPR rules on the processing and disclosure of personal data.CZUOOUGDPR€1,561↗
21 Jun 2016Česká republika – Ministerstvo školství, mládeže a tělovýchovyThe Czech Republic’s Ministry of Education, Youth and Sports was fined by the UOOU for processing sensitive personal data about students’ disabilities without a legal basis. The case indicates a breach of personal data protection rules and requires review of the lawful basis and data scope.CZUOOUGDPR€7,390↗