BULLETIN №082Last updated · 30 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.2%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 30 Mar 2023 | Vodafone-PanafonVodafone-Panafon was fined by the HDPA for failing to respond to a data subject access request concerning recorded calls. The authority also found that the company did not notify a personal data breach to the regulator. | GR | HDPA | GDPR | €40,000 | ↗ |
| 01 Jan 2015 | TEKOA CANAL TV S.L.TEKOA CANAL TV S.L. was fined EUR 39,000 by the AEPD for sending 29 commercial SMS messages without prior consent from recipients. The messages also did not include an opt-out option, in breach of the LSSI. | ES | AEPD | ePrivacy | €39,000 | ↗ |
| 21 Feb 2014 | INSTITUCIÓN EUROAMERICANA DE FORMACIÓN E.I.R.L.The entity was fined by the AEPD in the amount of 39,000 EUR for sending unsolicited commercial emails without prior recipient consent. This constituted a breach of Article 21 of the LSSI governing electronic marketing communications. | ES | AEPD | ePrivacy | €39,000 | ↗ |
| 05 Sept 2012 | NOVOPRINT C.B.NOVOPRINT C.B. was fined by the AEPD in the amount of 38,000 EUR for sending commercial emails to LLACRUTECH, S.L. despite requests to remove the address from mailing lists. The authority found this to be a breach of the LSSI rules on electronic communications. | ES | AEPD | ePrivacy | €38,000 | ↗ |
| 24 Feb 2014 | DTS DISTRIBUIDORA DE TELEVISION DIGITAL, S.A.DTS DISTRIBUIDORA DE TELEVISION DIGITAL, S.A. was fined by the AEPD in the amount of EUR 37,000 for continuing to send unsolicited emails to a former customer. The conduct occurred after the customer requested deletion of their data and breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €37,000 | ↗ |
| 29 Dec 2022 | Dane anonimowe (S. Sp. z o.o. z siedzibą w W. przy ul.)The President of UODO imposed an administrative fine of PLN 36,558 on the company. The sanction concerned failure to cooperate with the authority and failure to provide information necessary for the performance of its tasks. | PL | UODO | GDPR | €7,802 | ↗ |
| 24 Jul 2014 | Future srlFuture srl was fined EUR 36,000 by the Garante for making unsolicited promotional phone calls without proper consent. The authority found that the company’s conduct breached data protection rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 10 Apr 2019 | Anonymizováno (ÚOOÚ UOOU-06298/18-38)The entity was fined for repeatedly sending commercial communications without recipients’ consent. This breached § 7(2) of the Czech Act on Certain Information Society Services. | CZ | UOOU | ePrivacy | €1,406 | ↗ |
| 16 Mar 2017 | Cigno d’Argento s.r.l.Cigno d’Argento s.r.l. was fined by the Garante 36,000 EUR for data protection violations. The case concerned the improper use of video surveillance systems without the required authorization. | IT | Garante | GDPR | €36,000 | ↗ |
| 18 Apr 2013 | Tel. Com. s.r.l.Tel. Com. s.r.l. was fined EUR 36,000 by the Garante for registering numerous phone cards to unaware third parties. The company failed to provide the required information on data processing, which breached privacy rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 21 Sept 2017 | Unidata s.p.a.Unidata s.p.a. was fined EUR 36,000 by the Garante for failing to implement adequate security measures for personal data processing. The authority noted, among other issues, the use of passwords shorter than eight characters, which breached data protection requirements. | IT | Garante | GDPR | €36,000 | ↗ |
| 17 Nov 2011 | Impresa individuale Implantomat di Guidi CristianoThe company was fined EUR 36,000 by the Garante for unlawfully publishing and distributing advertising flyers that featured an individual's image without consent. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 04 Dec 2014 | Value Retail Managment s.r.l.Value Retail Managment s.r.l. was fined EUR 36,000 by the Garante. The authority found that the company failed to provide adequate simplified information about its video surveillance system, in breach of data protection rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 06 Jun 2018 | Azienda Unità Sanitaria Locale di PiacenzaAzienda Unità Sanitaria Locale di Piacenza was fined by the Garante EUR 36,000 for creating electronic health records without informing patients or obtaining their consent. The authority found this to be a breach of privacy rules. | IT | Garante | GDPR | €36,000 | ↗ |
| 05 Mar 2012 | GRANDES ALMACENES FNAC ESPAÑA S.A.The AEPD fined GRANDES ALMACENES FNAC ESPAÑA S.A. 36,000 EUR for sending unsolicited marketing emails to a customer who had opted out. The conduct breached the LSSI rules on electronic communications and recipient consent. | ES | AEPD | ePrivacy | €36,000 | ↗ |
| 13 Feb 2026 | Dane anonimowe (Komitet Wyborczy Kandydata na Prezydenta Rzeczypospolitej Polskiej M. W.)UODO imposed a fine of 35,582 PLN on the Election Committee of Presidential Candidate M. W. The authority found that campaign activities infringed the privacy of other individuals by using their personal data. The right to present truthful information about a candidate does not justify such processing. | PL | UODO | GDPR | €8,442 | ↗ |
| 07 Feb 2011 | EL CORTE INGLES, S.A.EL CORTE INGLES, S.A. was fined 35,000 EUR by the AEPD for sending nine commercial emails without the recipient’s consent. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €35,000 | ↗ |
| 22 Jul 2021 | Azienda sanitaria locale di BariAzienda sanitaria locale di Bari was fined EUR 35,000 by the Garante for failing to adopt minimum security measures. The breach resulted in exposure of health data, creating a significant compliance and privacy risk. | IT | Garante | GDPR | €35,000 | ↗ |
| 09 Apr 2021 | Miljø- og Kvalitetsledelse ASMiljø- og Kvalitetsledelse AS was fined 35,000 NOK by Datatilsynet for unlawfully sending personal data from camera recordings to an employer without a legal basis. The authority cited breaches of GDPR Articles 6 and 5. | NO | Datatilsynet | GDPR | €3,461 | ↗ |
| 30 Nov 2023 | SzkołęUODO imposed an administrative fine of PLN 35,000 on Szkołę. The authority found that the company had not implemented appropriate technical and organizational measures to secure personal data processed in the application. It also noted the absence of regular testing, measurement, and assessment of the effectiveness of those safeguards. | PL | UODO | GDPR | €8,048 | ↗ |