Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
04 Mar 2022	ENDESA ENERGÍA, S.A.U.ENDESA ENERGÍA, S.A.U. was fined EUR 50,000 by the AEPD for a personal data protection violation. The case involved unauthorized changes to a contract holder's information, resulting in a security breach under Article 32 of the GDPR.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2017	SERVICIOS DE INFORMACIÓN SOBRE LOS FICHEROS DE MOROSOS S.L.The entity sent commercial emails and SMS without proper consent and did not honor recipients’ objections. These actions breached data protection rules.	ES	AEPD	ePrivacy	€1,000	↗
04 Apr 2023	B.B.B.A neighbor installed a digital peephole with video recording capabilities without the consent of the homeowners' association. AEPD found that personal data were processed without a lawful basis, in breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€300	↗
23 Oct 2013	TECNIARAHAL QUITO S.L.TECNIARAHAL QUITO S.L. was fined by the AEPD 1,200 EUR for sending unsolicited commercial emails without recipient consent. The authority also found that the messages did not include an unsubscribe option, breaching Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,200	↗
07 Aug 2020	TELEFÓNICA MÓVILES ESPAÑA, S.A.U.TELEFÓNICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD 75,000 EUR for unauthorized access to a customer's data and harassment through excessive calls and messages. The case indicates failures in data protection controls and customer contact practices.	ES	AEPD	GDPR	€75,000	↗
19 Jan 2021	EQUIFAX IBERICA, S.L.EQUIFAX IBERICA, S.L. was fined by the AEPD 50,000 EUR for including personal data in a credit file without a valid debt and without proper notice. The authority found this breached data processing principles.	ES	AEPD	GDPR	€50,000	↗
01 Jan 2023	KUGELCHEN PROPIERTIES, S.L.KUGELCHEN PROPIERTIES, S.L. was fined by the AEPD EUR 2,000 for processing personal data without consent. The company continued charging a customer despite requests to delete personal data and stop transactions.	ES	AEPD	GDPR	€2,000	↗
29 Sept 2022	CITY OF SOUND 2010, S.L.CITY OF SOUND 2010, S.L. was fined EUR 800 by the AEPD for sending at least one commercial SMS to the complainant after the complainant had requested removal from the database. The authority found this to be a breach of Article 21 of the LSSI on unsolicited marketing communications.	ES	AEPD	ePrivacy	€800	↗
12 May 2022	CIUDAUTO, S.L.CIUDAUTO, S.L. was fined by the AEPD EUR 1,000 for continuing to send advertising emails despite a request to unsubscribe. The authority found a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
03 Nov 2020	LOSADA ADVOCATS S.L.LOSADA ADVOCATS S.L. was fined by the AEPD EUR 10,000 for sending an email without using BCC. This exposed recipients’ email addresses and breached data protection principles.	ES	AEPD	GDPR	€10,000	↗
14 Jul 2023	PARTIDO POPULARPARTIDO POPULAR was fined by the AEPD 5,000 EUR for using an individual's image without consent in its electoral program. The case concerns a breach of data protection rules.	ES	AEPD	GDPR	€5,000	↗
27 Sept 2010	GESTEVISION TELECINCO, S.A.GESTEVISION TELECINCO, S.A. was fined by the AEPD 50,000 EUR for sending mass promotional SMS messages. The authority found that recipients were not given a simple and free way to object to the processing of their data for marketing purposes, in breach of Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€50,000	↗
01 Jan 2015	GROUPALIA COMPRA COLECTIVA, S.L.GROUPALIA COMPRA COLECTIVA, S.L. was fined by the AEPD 1,000 EUR for sending an unsolicited commercial email to a user who had previously requested to unsubscribe from such communications. The authority found a breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
08 Feb 2024	ADADE BURGOS, S.L.ADADE BURGOS, S.L. was fined by the AEPD 5,000 EUR for improper use of personal data. The company informed clients about an employee’s disciplinary dismissal in a manner that breached data protection rules.	ES	AEPD	GDPR	€5,000	↗
07 Dec 2023	B.B.B.The educational institution did not inform parents about data processing on Chromebooks used by students. It also failed to have a contract with the data processor, which breaches GDPR Articles 13 and 28.	ES	AEPD	GDPR	€5,000	↗
13 Apr 2021	Vodafone España, S.A.U.Vodafone España, S.A.U. was fined 40,000 EUR by the AEPD for charging a customer's phone bill without consent. The authority found a breach of Article 6(1) GDPR due to the lack of a lawful basis for processing.	ES	AEPD	GDPR	€40,000	↗
25 Apr 2016	HAPPY SOCIAL MEDIA LTDHAPPY SOCIAL MEDIA LTD was fined by the AEPD in the amount of 1,400 EUR. The case concerned unsolicited marketing emails sent without a simple opt-out mechanism, in breach of the LSSI.	ES	AEPD	ePrivacy	€1,400	↗
01 Jan 2023	D. ***NIF.1The entity operating https://www.dmerka.com was fined EUR 600 by the AEPD. The authority found that the controller was not identified and that required information on personal data processing was not provided, in breach of Article 13 GDPR.	ES	AEPD	GDPR	€600	↗
09 Mar 2023	B.B.B.B.B.B. was fined by the AEPD EUR 600 for failing to implement corrective measures regarding improperly oriented surveillance cameras. The authority also found a failure to provide the required information under the GDPR.	ES	AEPD	GDPR	€600	↗
12 Jul 2022	B.B.B.B.B.B. was fined by the AEPD EUR 800 for sending commercial emails without the recipient's consent. The authority found this breached Article 21 of the LSSI on unsolicited electronic communications.	ES	AEPD	ePrivacy	€800	↗

Fine Tracker.