BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 Nov 2017 | Fantozzi Marinella e Banca Nazionale del Lavoro S.p.A.Fantozzi Marinella and Banca Nazionale del Lavoro S.p.A. were fined by the Garante in the amount of 4,000 EUR for breaches of data protection measures under the Italian Privacy Code. The case concerned non-compliance with requirements for the protection of personal data. | IT | Garante | GDPR | €4,000 | ↗ |
| 23 Nov 2017 | AMAT PALERMO S.P.A.AMAT PALERMO S.P.A. was fined by the Garante 20,000 EUR for failing to properly notify the use of a geolocation system to track vehicles. The authority found a breach of the Italian data protection code. | IT | Garante | GDPR | €20,000 | ↗ |
| 23 Nov 2017 | Famicord Italia s.r.l.Famicord Italia s.r.l. was fined by the Garante for processing personal data relating to health without notifying the authority. The company also collected personal data through its website without providing the required privacy notice. | IT | Garante | GDPR | €22,400 | ↗ |
| 23 Nov 2017 | Foschini Mauro e Banca Nazionale del Lavoro S.p.A.Foschini Mauro and Banca Nazionale del Lavoro S.p.A. were fined by the Garante 4,000 EUR for breaches of data protection rules. The case concerned non-compliance with provisions of the Italian Privacy Code. | IT | Garante | GDPR | €4,000 | ↗ |
| 28 Nov 2017 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 45,000 EUR by the AEPD for sending commercial emails without providing a valid electronic address for exercising the right to object. The authority found this to be a breach of LSSI rules on commercial communications. | ES | AEPD | ePrivacy | €45,000 | ↗ |
| 30 Nov 2017 | CAR SHARING TRENTINO Società CooperativaCAR SHARING TRENTINO Società Cooperativa was fined by the Garante 20,000 EUR. The authority found failures to comply with notification obligations related to vehicle geolocation, constituting a breach of data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 01 Dec 2017 | BILUA E-COMMERCE S.L (CARETHY y BIUKY)BILUA E-COMMERCE S.L. was fined by the AEPD EUR 7,000 for sending unsolicited commercial emails. The messages were sent despite the recipient's request to unsubscribe, which breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €7,000 | ↗ |
| 14 Dec 2017 | Rotondi AndreaAndrea Rotondi was fined for the improper handling of banking documents that were found by a private citizen. Banca Nazionale del Lavoro was held jointly liable for the violation. | IT | Garante | GDPR | €4,000 | ↗ |
| 14 Dec 2017 | Telenando di Sannino Caterina e C s.a.s.Telenando di Sannino Caterina e C s.a.s. was fined by the Garante EUR 30,000 for registering phone cards to unaware third parties without their consent. The case concerned a breach of data protection rules. | IT | Garante | GDPR | €30,000 | ↗ |
| 14 Dec 2017 | Salvatore AloiSalvatore Aloi was fined EUR 120,000 by the Italian Garante. The case concerned the processing of personal data of 12 individuals without consent, by activating phone cards in their names without authorization. | IT | Garante | GDPR | €120,000 | ↗ |
| 14 Dec 2017 | SEMS – Servizi per la mobilità sostenibile S.r.l.SEMS – Servizi per la mobilità sostenibile S.r.l. was fined EUR 20,000 by the Garante. The authority found that the company failed to meet notification obligations linked to the installation of satellite tracking devices in its vehicle fleet, in breach of data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 14 Dec 2017 | Yahoo Italia s.r.l.Yahoo Italia s.r.l. was fined EUR 80,000 by the Garante for violations related to the processing of personal data concerning the geolocation of users connecting to its website. The case concerned irregularities in how these data were collected and processed. | IT | Garante | GDPR | €80,000 | ↗ |
| 29 Dec 2017 | Anonymised (HDPA 151/2017)The controller of the blog dexiextrem.blogspot.gr was fined EUR 2,000 for failing to comply with the data subject’s right to object to the processing of personal data. The authority found a breach of Article 13 of Law 2472/1997 in connection with the publication of personal data. | GR | HDPA | GDPR | €2,000 | ↗ |
| 01 Jan 2018 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 20,000 EUR by the AEPD for sending unsolicited marketing emails. The authority found that recipients were not given an effective unsubscribe option, despite a request to be removed from the mailing list. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 01 Jan 2018 | IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONALThe AEPD fined Iberia 5,700 EUR for sending unsolicited commercial emails to a complainant. The company had previously confirmed the cancellation of the complainant’s personal data, yet it continued marketing communications, breaching Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €5,700 | ↗ |
| 01 Jan 2018 | CANARY ISLANDS CAR S.L.CANARY ISLANDS CAR S.L. was fined by the AEPD 45,000 EUR for inaccurate processing of personal data. As a result, a traffic violation was incorrectly attributed to a person who had not rented the vehicle. | ES | AEPD | GDPR | €45,000 | ↗ |
| 01 Jan 2018 | CAFETERÍA NAGASAKICAFETERÍA NAGASAKI was fined by the AEPD 1,500 EUR for using surveillance cameras to capture images of public sidewalks without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2018 | LIGA NACIONAL DE FÚTBOL PROFESIONALThe Spanish Data Protection Agency (AEPD) fined LIGA NACIONAL DE FÚTBOL PROFESIONAL for using a mobile app to indiscriminately capture ambient sounds. This could have resulted in the processing of personal data without the consent of the individuals concerned. | ES | AEPD | GDPR | €500,000 | ↗ |
| 01 Jan 2018 | MAISONS DU MONDE ESPAÑA, S.L.MAISONS DU MONDE ESPAÑA, S.L. was fined by the AEPD 15,000 EUR for sending unsolicited commercial SMS messages. The company did not provide recipients with an effective opt-out mechanism, despite prior requests to unsubscribe. | ES | AEPD | ePrivacy | €15,000 | ↗ |
| 01 Jan 2018 | ZARA LIBRO S.L. (DIFUSIÓN DEL LIBRO)ZARA LIBRO S.L. was fined by the AEPD in the amount of 1,000 EUR for sending a commercial email without a prior commercial relationship. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |