Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
01 Jan 2022ADADE BURGOS, S.L.ADADE BURGOS, S.L. was fined by the AEPD EUR 5,000 for improper use of personal data. The company informed clients about an employee's disciplinary dismissal, which breached data protection rules.ESAEPDGDPR€5,000
03 Mar 2022A.A.A.The entity was fined for operating a video surveillance system with cameras directed toward public areas without proper signage. This breached data protection rules and the information obligations owed to individuals being recorded.ESAEPDGDPR€600
21 May 2015BONANZA DIGITAL SERVICES, S.L.BONANZA DIGITAL SERVICES, S.L. was fined EUR 35,000 by the AEPD for sending 20 unsolicited advertising SMS messages without prior consent. The company also failed to provide an opt-out mechanism, breaching the LSSI.ESAEPDePrivacy€35,000
12 Aug 2021NATURAL LOGISTICS, S.L.NATURAL LOGISTICS, S.L. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails despite the recipient's objection. This breached Article 21 of the LSSI on marketing communications without consent.ESAEPDePrivacy€3,000
19 Oct 2010BUONGIORNO MARKETING SERVICES ESPAÑA S.L.U.BUONGIORNO MARKETING SERVICES ESPAÑA S.L.U. was fined by the AEPD for sending unsolicited commercial SMS messages. The conduct breached Article 21 of the LSSI, which governs marketing communications without prior consent.ESAEPDePrivacy€1,200
02 Apr 2021PAGAMASTARDE, S.L.PAGAMASTARDE, S.L. was fined EUR 5,000 by the AEPD for sending advertising emails after a request for data cancellation had already been confirmed as processed. The authority treated this as a breach of data protection rules.ESAEPDePrivacy€5,000
17 Nov 2022NUEVAS TECNOLOGIAS MEDITERRANEO, S.L.NUEVAS TECNOLOGIAS MEDITERRANEO, S.L. was fined by the AEPD EUR 800 for sending unsolicited advertising emails without prior consent. The case concerned a breach of Article 21 of the LSSI and unlawful direct marketing.ESAEPDePrivacy€800
01 Jan 2014ESTABLIMENTS MIRÓ, S.L.ESTABLIMENTS MIRÓ, S.L. was fined by the AEPD EUR 1,000 for sending unauthorized advertising text messages to the complainant's mobile phone. The messages were sent after the data subject had requested cancellation of their data.ESAEPDePrivacy€1,000
01 Jan 2019LA ROCA NETWORKS, S.L.LA ROCA NETWORKS, S.L. was fined by the AEPD 2,500 EUR for sending unsolicited commercial emails without proper consent. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications.ESAEPDePrivacy€2,500
14 Jul 2023GLOBAL TELECOMUNICACIONES INTERRECARGAS, S.L.The entity was fined 1,000 EUR by the AEPD for sending an advertising SMS without the recipient’s prior consent. This constituted a breach of Article 21 of the LSSI on unsolicited commercial communications.ESAEPDePrivacy€1,000
01 Jan 2021ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined 100,000 EUR by the AEPD for requiring customers to submit photographs of both sides of their ID cards as a condition for package delivery. The authority found that this practice breached data protection principles.ESAEPDGDPR€100,000
01 Jan 2023INMARAN ASESORES S.L.INMARAN ASESORES S.L. was fined by the AEPD in the amount of 2,000 EUR for failing to comply with a data protection authority resolution. The company did not implement the required measures to inform data subjects under Article 13 GDPR.ESAEPDGDPR€2,000
16 Apr 2024ARRENDAMIENTOS DEUDORES, S.L.ARRENDAMIENTOS DEUDORES, S.L. accessed personal data in the ASNEF file without proper authorization. The AEPD found a breach of Article 6(1) GDPR and imposed a fine of EUR 2,000.ESAEPDGDPR€2,000
24 Jun 2025PROCONO SAPROCONO SA was fined EUR 300,000 by the AEPD for a data breach. The incident exposed customer data on the internet, including names, addresses, email addresses, and possibly bank account details.ESAEPDGDPR€300,000
01 Jan 2014INSTITUTO SUPERIOR DE EDUCACIÓN, ADMINISTRACIÓN Y DESARROLLO S.L.The entity sent unsolicited commercial emails without prior recipient consent. This breached Article 21.1 of the LSSI and resulted in an EUR 800 fine imposed by the AEPD.ESAEPDePrivacy€800
20 Mar 2012GAS NATURAL S.U.R. SDG S.A.GAS NATURAL S.U.R. SDG S.A. was fined EUR 1,800 by the AEPD for continuing to send commercial emails to a complainant after they had requested that such communications stop. The authority found this to be a breach of Article 21 of the LSSI.ESAEPDePrivacy€1,800
01 Jan 2014GRUPOPSCOM, SCPGRUPOPSCOM, SCP was fined 6,300 EUR by the AEPD. The sanction concerned sending unsolicited commercial emails without recipient consent, in breach of Article 21 of the LSSI.ESAEPDePrivacy€6,300
05 May 2022JOYPAZAR, S.A.JOYPAZAR, S.A. was fined by the AEPD for reinstalling a surveillance camera that captured images of a public children's park. The authority found this to be a breach of data protection rules.ESAEPDGDPR€2,000
28 Jun 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 60,000 EUR by the AEPD for a data protection breach. Personal data of a third party was accessible through its mobile application, and the issue was not resolved promptly after it was reported.ESAEPDGDPR€60,000
05 Sept 2025AUDIO ÓPTICA EUROPA, S.L.AUDIO ÓPTICA EUROPA, S.L. was fined by the AEPD EUR 1,500 for using a minor’s image without valid consent. The authority found this conduct to be in breach of Article 6 of the GDPR.ESAEPDGDPR€1,500