BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 20 Dec 2022 | HAYS PERSONNEL SERVICE ESPAÑA, S.A.HAYS PERSONNEL SERVICE ESPAÑA, S.A. was fined by the AEPD 5,000 EUR for sending marketing emails without the recipient’s consent. The conduct breached Article 21 of the LSSI, which requires prior consent for such communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 13 Jul 2023 | B.B.B.B.B.B. was fined by the AEPD 600 EUR for installing a surveillance camera directed at a public area without prior administrative authorization and without proper signage. The authority found breaches of Articles 5(1)(c) and 13 GDPR. | ES | AEPD | GDPR | €600 | ↗ |
| 13 Feb 2024 | FACTOR ENERGÍA, S.A.FACTOR ENERGÍA, S.A. was fined by the AEPD 6,000 EUR for processing personal data without a legal basis, in breach of Article 6(1) GDPR. The company failed to communicate the termination of a gas contract and improperly shared personal data with other companies. | ES | AEPD | GDPR | €6,000 | ↗ |
| 14 Apr 2021 | Avalos Consultores, S.L.Avalos Consultores, S.L. was fined by the AEPD 4,000 EUR for transferring personal data to another company without the data subject's consent. The authority found this breached Article 6 of the GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 21 Feb 2024 | DIBEA ESTETIC, S.L.DIBEA ESTETIC, S.L. was fined EUR 7,000 by the AEPD for transferring personal data without the data subject’s consent. The authority found this conduct to be contrary to Article 6(1) of the GDPR. | ES | AEPD | GDPR | €7,000 | ↗ |
| 09 May 2022 | FARMACIA MERCADO CENTRAL DE SAN FERNANDO C.BThe pharmacy was fined by the AEPD for operating a video surveillance system that recorded public areas and conversations between employees and customers. The authority found that this processing breached data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 27 Mar 2023 | QUALITY-PROVIDER S.A.QUALITY-PROVIDER S.A. was fined EUR 20,000 by the Spanish data protection authority, AEPD. The company failed to provide requested information, obstructing the authority’s investigative powers under Article 58(1) GDPR. | ES | AEPD | GDPR | €20,000 | ↗ |
| 25 Jan 2021 | PATIO ANCESTRAL, S.L.PATIO ANCESTRAL, S.L. was fined by the AEPD in the amount of EUR 5,000 for sending a letter containing personal data to the complainant's workplace. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 09 Nov 2021 | Cyrana España General S.L.Cyrana España General S.L. was fined by the AEPD in the amount of 5,000 EUR for processing personal data without consent. The conduct resulted in unauthorized charges to a customer's bank account. | ES | AEPD | GDPR | €5,000 | ↗ |
| 30 Dec 2020 | B.B.B.The entity was fined by the AEPD in the amount of 1,500 EUR. The violation concerned installing surveillance cameras directed toward public areas without the required authorization and without compliant informational signage. | ES | AEPD | GDPR | €1,500 | ↗ |
| 13 Jan 2023 | CORREDURÍA DE SEGUROS DE MADRID, S.L.CORREDURÍA DE SEGUROS DE MADRID, S.L. was fined by the AEPD 10,000 EUR for processing personal data without a legal basis. The company linked the complainant’s bank account to insurance policies they had not taken out, resulting in unauthorized charges. | ES | AEPD | GDPR | €10,000 | ↗ |
| 26 Nov 2019 | EDP COMERCIALIZADORA, S.A.U.EDP COMERCIALIZADORA, S.A.U. was fined by the AEPD 75,000 EUR for processing personal data without consent. The case involved data linked to a gas contract unrelated to the complainant, which breached Article 6(1) of the GDPR. | ES | AEPD | GDPR | €75,000 | ↗ |
| 03 Feb 2025 | CENTRAL SINDICAL INDEPENDIENTE Y DE FUNCIONARIOS CSI-CSIFThe labor union CSI-CSIF was fined EUR 4,000 by the AEPD for failing to adequately protect personal data during a voting process. The authority found breaches of GDPR Articles 5(1)(f) and 32 relating to security and confidentiality. | ES | AEPD | GDPR | €4,000 | ↗ |
| 18 Jan 2022 | BAZARDELALEGION.COMBAZARDELALEGION.COM was fined by the AEPD for failing to provide the required information on its website under Article 13 GDPR. The breach concerned the website’s information duties toward individuals whose data are collected online. | ES | AEPD | GDPR | €3,000 | ↗ |
| 01 Jan 2023 | Suministrador Ibérico de Energía, S.L.Suministrador Ibérico de Energía, S.L. was fined by the AEPD €70,000 for switching a customer's electricity provider without consent. The authority found that the processing lacked a valid legal basis under Article 6(1) GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 24 Jan 2014 | TEMAR Y ASOCIADOS S.L.TEMAR Y ASOCIADOS S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which prohibits marketing communications without prior consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 24 Apr 2022 | SMART ELECTRIC SOLUTIONS, S.L.SMART ELECTRIC SOLUTIONS, S.L. was fined by the AEPD 800 EUR for installing a surveillance camera that captured public transit areas without proper warning signage. The authority found a breach of data minimization and the information duty under GDPR Articles 5(1)(c) and 13. | ES | AEPD | GDPR | €800 | ↗ |
| 05 Jan 2024 | B.B.B.The entity was fined for publishing personal images and phone numbers on Telegram channels without the data subjects’ consent. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €10,000 | ↗ |
| 23 Jul 2010 | INEXTRAMA SOL INF. SECTOR GRAFICO S.L.INEXTRAMA SOL INF. SECTOR GRAFICO S.L. was fined by the AEPD EUR 30,001 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which prohibits unsolicited marketing communications. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 13 Jan 2022 | ADVANS BROKERS CORREDURIA DE SEGUROS S.L.ADVANS BROKERS CORREDURIA DE SEGUROS S.L. was fined by the AEPD EUR 80,000 for a data breach affecting 55,000 individuals, including minors. The authority found that the incident was reported to the AEPD with delay. | ES | AEPD | GDPR | €80,000 | ↗ |