BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2012 | GRUPOLIDERTEL S.L.GRUPOLIDERTEL S.L. was fined by the AEPD EUR 2,400 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which prohibits marketing communications without the recipient’s consent. | ES | AEPD | ePrivacy | €2,400 | ↗ |
| 16 Dec 2021 | Sindicato Intersectorial Trabajadores/as Provincia de AlicanteThe labor union was fined by the AEPD for breaching data protection rules. The case concerned the publication of committee meeting minutes containing signatures on a union notice board and in a WhatsApp group. | ES | AEPD | GDPR | €2,000 | ↗ |
| 16 Sept 2011 | VERTICALES INTERCOM S.L.VERTICALES INTERCOM S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited advertising emails. The conduct breached Article 21 of the LSSI, which prohibits unwanted electronic marketing communications. | ES | AEPD | ePrivacy | €600 | ↗ |
| 02 Apr 2020 | HAPPY FRIDAY, S.L.HAPPY FRIDAY, S.L. was fined by the AEPD in the amount of 2,500 EUR for failing to comply with data protection rules on the use of cookies. The authority found that the company did not provide the required information or obtain user consent. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 01 Jan 2013 | GESTION CONFIDENCIAL DESTRUPACK S LGESTION CONFIDENCIAL DESTRUPACK S L was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails despite a prior request to unsubscribe. The authority found a breach of Article 21 of Spain’s LSSI. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 01 Jan 2012 | BECERRITA, S.L.BECERRITA, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails without proper consent. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €600 | ↗ |
| 03 Oct 2025 | INTEGRAL DE VIGILANCIA Y CONTROL, S.L.INTEGRAL DE VIGILANCIA Y CONTROL, S.L. was fined by the AEPD 5,000 EUR for sending emails to a personal email address without a proper legal basis. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 22 Feb 2012 | J & J CONSULTINGJ & J CONSULTING was fined by the AEPD €1,800 for sending unsolicited commercial emails. The conduct continued despite unsubscribe requests, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 13 Mar 2015 | HYUNDAY MOTOR ESPAÑA, S.L.U.HYUNDAY MOTOR ESPAÑA, S.L.U. was fined 10,000 EUR by the AEPD. The sanction concerned sending unsolicited commercial emails without recipient consent, in breach of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES S.A.XFERA MÓVILES S.A. was fined 60,000 EUR by the AEPD for processing personal data without consent. As a result, unauthorized contracts were sent to a customer, indicating improper use of personal data. | ES | AEPD | GDPR | €60,000 | ↗ |
| 17 Feb 2025 | ARCONADA 1932, S.L.ARCONADA 1932, S.L. did not properly handle a data subject request for access to and deletion of personal data. This breached Articles 15 and 17 of the GDPR, and the company was fined for failing to comply with the AEPD's resolution. | ES | AEPD | GDPR | €1,500 | ↗ |
| 17 Mar 2022 | GRUPO TECNOPOLE FABRICACIÓN Y MONTAJES, S.L.The company was fined by the AEPD €800 for sending an unsolicited commercial email without the required consent. The breach concerned Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €800 | ↗ |
| 14 Mar 2011 | VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial communications via SMS. The conduct breached Article 21.1 of the LSSI, which prohibits such messages without prior consent. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 29 Apr 2026 | IBERDROLA CLIENTES, S.A.U.IBERDROLA CLIENTES, S.A.U. was fined EUR 1,000,000 by the AEPD for failing to implement adequate technical and organizational security measures. The authority found that the company did not properly verify customer identity, which constitutes a breach of Article 32 GDPR. | ES | AEPD | GDPR | €1,000,000 | ↗ |
| 18 Jul 2025 | EUROPEAN ENERGY TRADE S.L.EUROPEAN ENERGY TRADE S.L. was fined 600 EUR by the AEPD. The company failed to provide access to data and information requested by the data protection authority, breaching Article 58.1 of the GDPR. | ES | AEPD | GDPR | €600 | ↗ |
| 09 Dec 2024 | SOBLADA RESTAURACIÓN, S.L.SOBLADA RESTAURACIÓN, S.L. was fined by the AEPD EUR 4,500 for installing a video surveillance system without proper signage. The company also failed to inform employees about the system and its purposes, breaching GDPR Articles 5(1)(c) and 13. | ES | AEPD | GDPR | €4,500 | ↗ |
| 07 May 2014 | TELEFÓNICA MÓVILES ESPAÑA, SAUTELEFÓNICA MÓVILES ESPAÑA, SAU was fined by the AEPD €1,200 for sending an unauthorized commercial SMS. The recipient was listed on the Robinson List, which constituted a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 01 Jan 2019 | TWITTER INTERNATIONAL COMPANY (TWITTER SPAIN, S.L.)Twitter International Company (Twitter Spain, S.L.) was fined EUR 30,000 by the AEPD. The authority found inadequate cookie information and the use of cookies without obtaining user consent, in breach of the LSSI. | ES | AEPD | ePrivacy | €30,000 | ↗ |
| 08 Feb 2023 | VODAFONE SERVICIOS, S.L.U.VODAFONE SERVICIOS, S.L.U. was fined by the AEPD 70,000 EUR for a SIM card duplication incident. The incident resulted in identity theft and unauthorized access to a bank account, indicating a breach of data protection rules. | ES | AEPD | GDPR | €70,000 | ↗ |
| 23 Oct 2013 | AUTOESCUELA XXXXXXAUTOESCUELA XXXXXX was fined by the AEPD for sending unsolicited commercial emails without providing a simple and free way to object. The authority found a breach of Article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |