BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 09 Jan 2019 | TOM TOM SALES BV SUCURSAL EN ESPAÑATOM TOM SALES BV SUCURSAL EN ESPAÑA was fined by the AEPD 2,500 EUR for sending a promotional email to a user after confirming the deletion of their data. The authority found this conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 14 Feb 2024 | PRENSA IBÉRICA MEDIA S.L.PRENSA IBÉRICA MEDIA S.L. was fined by the AEPD in the amount of 5,000 EUR for failing to obtain proper user consent for cookies on its website. The authority found that this practice breached the LSSI requirements on cookies. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 21 Mar 2022 | B.B.B.The AEPD imposed a 300 EUR fine on B.B.B. for improperly directing a camera toward a transit area. The case concerned non-compliance with data protection rules governing video surveillance. | ES | AEPD | GDPR | €300 | ↗ |
| 16 Apr 2010 | NAVIRCONET, S.LNAVIRCONET, S.L was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €600 | ↗ |
| 11 Oct 2023 | COM. PROP. ***COMUNIDAD.1The entity installed surveillance cameras oriented toward public roads without prior administrative authorization. This breached data protection rules and resulted in a fine by the AEPD. | ES | AEPD | GDPR | €1,000 | ↗ |
| 03 Oct 2023 | MAPFRE ESPAÑA COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.MAPFRE España was fined by the AEPD 1,140,000 EUR for requesting excessive personal data from a guarantor in a rental contract. The authority found breaches of GDPR data minimization and transparency principles. | ES | AEPD | GDPR | €1,140,000 | ↗ |
| 01 Jan 2020 | SIGNALLIA MARKETING DISTRIBUTION, S.A.SIGNALLIA MARKETING DISTRIBUTION, S.A. was fined by the AEPD 100,000 EUR for failing to provide access to servers and data. The authority found a breach of Article 28(3)(g) GDPR. | ES | AEPD | GDPR | €100,000 | ↗ |
| 12 May 2017 | RED UNIVERSAL DE MARKETING Y BOOKINGS ONLINE S.A.The entity sent unsolicited commercial emails. It continued sending them despite requests to delete the data, which breached electronic communications rules. | ES | AEPD | ePrivacy | €4,500 | ↗ |
| 29 Apr 2016 | ACROSS SRLACROSS SRL was fined by the AEPD in the amount of 1,500 EUR for sending unsolicited commercial emails without proper consent. The case concerned Article 21.1 of the LSSI and indicates a lack of a valid legal basis for direct marketing. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 16 Jul 2015 | VUELING AIRLINES S.A.VUELING AIRLINES S.A. was fined by the AEPD 5,000 EUR for sending unsolicited commercial emails to a user who had unsubscribed. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 24 Mar 2025 | DINAMO SAN JUAN, C.F.DINAMO SAN JUAN, C.F. was fined by the AEPD for processing personal data without a legal basis. The case concerned the failure to effectively remove images of minors from social media after a parent requested deletion. | ES | AEPD | GDPR | €1,000 | ↗ |
| 03 Dec 2021 | GARLEX SOLUTIONS, S.L.GARLEX SOLUTIONS, S.L. was fined by the AEPD 15,000 EUR for processing personal data without consent. The case concerned an unsolicited contract offer for electricity supply. | ES | AEPD | GDPR | €15,000 | ↗ |
| 04 Apr 2022 | B.B.B.The entity was fined by the AEPD in the amount of EUR 10,000 for publishing personal data, including images and videos, without the consent of the data subjects. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €10,000 | ↗ |
| 24 Feb 2020 | BANKIA, S.A.BANKIA, S.A. was fined by the AEPD EUR 50,000 for sending commercial advertising by postal mail to a customer who had objected to the processing of their data for advertising purposes. The authority found this conduct contrary to GDPR Article 6(1)(f). | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2018 | SHANA RETAIL S.L.SHANA RETAIL S.L. was fined by the AEPD for improperly disposing of documents containing personal data. The breach concerned data protection rules and the need to prevent unauthorized disclosure of information. | ES | AEPD | GDPR | €15,000 | ↗ |
| 23 Apr 2021 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD 50,000 EUR for changing a customer's tariff without consent. The case involved identity impersonation and improper processing of personal data under the GDPR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 07 Oct 2014 | CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD EUR 5,000 for sending unsolicited commercial communications by email. The conduct breached Article 21 of the LSSI, which restricts unwanted marketing messages. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 27 Feb 2023 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD for breaching Article 6(1) GDPR after a SIM card was duplicated without consent. The incident enabled unauthorized access to a customer's bank accounts, indicating serious failures in verification and data protection controls. | ES | AEPD | GDPR | €200,000 | ↗ |
| 01 Jan 2023 | UNIQUE HOTEL APARTMENT. S.LThe hotel improperly managed guest registration records, breaching data protection principles. It failed to maintain numerical order and did not communicate the records to the competent security forces. | ES | AEPD | GDPR | €2,000 | ↗ |
| 17 Oct 2023 | MOBILITY AUTOCENTRO, S.L.MOBILITY AUTOCENTRO, S.L. was fined by the AEPD in the amount of 2,000 EUR for sending unsolicited commercial SMS messages. The authority found that recipients were not given an opt-out option, which breached the Spanish LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |