BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 21 Feb 2023 | C.C.C.The entity was fined by the AEPD in the amount of EUR 300 for installing a video surveillance system that captured public areas. This conduct breached data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 01 Jan 2019 | D. B.B.B.The respondent was fined for publishing intimate photos and conversations of the complainant on WhatsApp without consent. The authority found a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 19 Nov 2021 | MEETING PUERTO C.B.MEETING PUERTO C.B. was fined by the AEPD EUR 2,000 for unlawful processing of personal data. The breach involved posting images and comments on social media without the consent of the data subjects, contrary to Article 6(1) of the GDPR. | ES | AEPD | GDPR | €2,000 | ↗ |
| 02 Oct 2025 | RETSINNAL GROUP, S.L.U.RETSINNAL GROUP, S.L.U. was fined 1,000 EUR by the AEPD for deficiencies in its website privacy policy. The authority found that the company did not provide adequate information about the data controller, in breach of Article 13 GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 22 Aug 2022 | COMUNIDAD DE PROPIETARIOS ***COMUNIDAD.1The entity installed a video surveillance camera in a common area without proper signage. This breached Article 13 GDPR because individuals in the monitored area were not given the required information. | ES | AEPD | GDPR | €300 | ↗ |
| 16 Sept 2022 | D.A.S. DEFENSA DEL AUTOMOVILISTA Y DE SINIESTROS-INTERNACIONAL, S.A. DE SEGUROS Y REASEGUROSD.A.S. Seguros was fined by the AEPD 50,000 EUR for breaching data protection principles. The company improperly disclosed personal and financial data related to an insurance policy to a third party. | ES | AEPD | GDPR | €50,000 | ↗ |
| 03 Sept 2025 | AENA, S.M.E., S.A.The AEPD imposed a fine of EUR 10,043,002 on AENA, S.M.E., S.A. for processing passenger personal data in a manner deemed unnecessary and disproportionate. The authority found that the company’s practices breached data protection rules. | ES | AEPD | GDPR | €10,043,000 | ↗ |
| 08 Oct 2024 | SEAT, S.A.SEAT, S.A. was fined by the AEPD €20,000 for using cookies on its website without obtaining user consent. The authority found this conduct to be in breach of the LSSI. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 01 Jan 2020 | Telefónica Móviles España, S.A.U.Telefónica Móviles España, S.A.U. was fined EUR 70,000 by the AEPD for unauthorized charges on a customer's account. The authority found a breach of Article 6(1) GDPR, indicating processing without a valid legal basis. | ES | AEPD | GDPR | €70,000 | ↗ |
| 19 Jan 2015 | SYPNOSIS DISTRIBUCION INTEGRAL, S.A.USYPNOSIS DISTRIBUCION INTEGRAL, S.A.U was fined by the AEPD EUR 1,000 for sending unsolicited promotional emails without the recipient's consent. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 17 Jul 2023 | HSSERVICE LIZCON SOLUTIONS, S.L.HSSERVICE LIZCON SOLUTIONS, S.L. was fined by the AEPD EUR 4,000 for failing to provide information about personal data processing when a customer brought in a TV for repair. The authority also found that the company’s website lacked the required data protection information. | ES | AEPD | GDPR | €4,000 | ↗ |
| 16 May 2024 | EDITAURI S.L.EDITAURI S.L. was fined by the AEPD EUR 600 for not having a privacy policy on its online store. The authority found a breach of Article 13 GDPR because users were not provided with the required information about data processing. | ES | AEPD | GDPR | €600 | ↗ |
| 18 Mar 2021 | Vodafone España, S.A.U.The AEPD imposed a 50,000 EUR fine on Vodafone España, S.A.U. for unauthorized processing of personal data. The case involved fraudulent contracting of mobile services in the complainant's name. | ES | AEPD | GDPR | €50,000 | ↗ |
| 03 Jul 2020 | IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONALIberia was fined by the AEPD 40,000 EUR for failing to provide the complainant access to their personal data, including telephone recordings. The authority found a breach of the right of access to personal data. | ES | AEPD | GDPR | €40,000 | ↗ |
| 24 Nov 2022 | CARROZADOS TECAI, S.L.CARROZADOS TECAI, S.L. was fined by the AEPD EUR 300 for installing a surveillance camera that could capture public areas without proper authorization. The authority also found inadequate informational signage for affected individuals, in breach of Article 13 GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 30 Oct 2015 | VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined by the AEPD €15,000 for sending unsolicited marketing emails despite the recipient’s attempts to unsubscribe. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €15,000 | ↗ |
| 01 Jan 2014 | TELEFÓNICA MÓVILES ESPAÑA S.A.U.TELEFÓNICA MÓVILES ESPAÑA S.A.U. was fined by the AEPD in the amount of 5,000 EUR. The case concerned unsolicited commercial communications sent via SMS in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 06 Feb 2023 | ONEY SERVICIOS FINANCIEROS E.F.C., S.A.ONEY SERVICIOS FINANCIEROS E.F.C., S.A. was fined by the AEPD 50,000 EUR for inaccurately processing personal data. The company included incorrect debt information in credit information systems, breaching data protection principles. | ES | AEPD | GDPR | €50,000 | ↗ |
| 08 Apr 2024 | IBERDROLA CLIENTES, S.A.U.IBERDROLA CLIENTES, S.A.U. was fined by the AEPD 200,000 EUR for unlawfully including personal data in a credit information system without proper notification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €200,000 | ↗ |
| 06 Aug 2025 | ORNITOLÓGICA DE ANDALUCÍA FOAORNITOLÓGICA DE ANDALUCÍA FOA was fined EUR 1,500 by the AEPD for sending a mass email that contained personal data, including names and DNI numbers, without adequate security measures. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |