Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
01 Jan 2012GRUPOLIDERTEL S.L.GRUPOLIDERTEL S.L. was fined by the AEPD EUR 2,400 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which prohibits marketing communications without the recipient’s consent.ESAEPDePrivacy€2,400
16 Dec 2021Sindicato Intersectorial Trabajadores/as Provincia de AlicanteThe labor union was fined by the AEPD for breaching data protection rules. The case concerned the publication of committee meeting minutes containing signatures on a union notice board and in a WhatsApp group.ESAEPDGDPR€2,000
16 Sept 2011VERTICALES INTERCOM S.L.VERTICALES INTERCOM S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited advertising emails. The conduct breached Article 21 of the LSSI, which prohibits unwanted electronic marketing communications.ESAEPDePrivacy€600
02 Apr 2020HAPPY FRIDAY, S.L.HAPPY FRIDAY, S.L. was fined by the AEPD in the amount of 2,500 EUR for failing to comply with data protection rules on the use of cookies. The authority found that the company did not provide the required information or obtain user consent.ESAEPDePrivacy€2,500
01 Jan 2013GESTION CONFIDENCIAL DESTRUPACK S LGESTION CONFIDENCIAL DESTRUPACK S L was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails despite a prior request to unsubscribe. The authority found a breach of Article 21 of Spain’s LSSI.ESAEPDePrivacy€1,800
01 Jan 2012BECERRITA, S.L.BECERRITA, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails without proper consent. The conduct breached Article 21 of the LSSI on electronic marketing communications.ESAEPDePrivacy€600
03 Oct 2025INTEGRAL DE VIGILANCIA Y CONTROL, S.L.INTEGRAL DE VIGILANCIA Y CONTROL, S.L. was fined by the AEPD 5,000 EUR for sending emails to a personal email address without a proper legal basis. The authority treated this as a breach of data protection rules.ESAEPDGDPR€5,000
22 Feb 2012J & J CONSULTINGJ & J CONSULTING was fined by the AEPD €1,800 for sending unsolicited commercial emails. The conduct continued despite unsubscribe requests, which breached Article 21 of the LSSI.ESAEPDePrivacy€1,800
13 Mar 2015HYUNDAY MOTOR ESPAÑA, S.L.U.HYUNDAY MOTOR ESPAÑA, S.L.U. was fined 10,000 EUR by the AEPD. The sanction concerned sending unsolicited commercial emails without recipient consent, in breach of the LSSI.ESAEPDePrivacy€10,000
01 Jan 2019XFERA MÓVILES S.A.XFERA MÓVILES S.A. was fined 60,000 EUR by the AEPD for processing personal data without consent. As a result, unauthorized contracts were sent to a customer, indicating improper use of personal data.ESAEPDGDPR€60,000
17 Feb 2025ARCONADA 1932, S.L.ARCONADA 1932, S.L. did not properly handle a data subject request for access to and deletion of personal data. This breached Articles 15 and 17 of the GDPR, and the company was fined for failing to comply with the AEPD's resolution.ESAEPDGDPR€1,500
17 Mar 2022GRUPO TECNOPOLE FABRICACIÓN Y MONTAJES, S.L.The company was fined by the AEPD €800 for sending an unsolicited commercial email without the required consent. The breach concerned Article 21 of the LSSI, which governs electronic marketing communications.ESAEPDePrivacy€800
14 Mar 2011VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined by the AEPD in the amount of 1,800 EUR for sending unsolicited commercial communications via SMS. The conduct breached Article 21.1 of the LSSI, which prohibits such messages without prior consent.ESAEPDePrivacy€1,800
29 Apr 2026IBERDROLA CLIENTES, S.A.U.IBERDROLA CLIENTES, S.A.U. was fined EUR 1,000,000 by the AEPD for failing to implement adequate technical and organizational security measures. The authority found that the company did not properly verify customer identity, which constitutes a breach of Article 32 GDPR.ESAEPDGDPR€1,000,000
18 Jul 2025EUROPEAN ENERGY TRADE S.L.EUROPEAN ENERGY TRADE S.L. was fined 600 EUR by the AEPD. The company failed to provide access to data and information requested by the data protection authority, breaching Article 58.1 of the GDPR.ESAEPDGDPR€600
09 Dec 2024SOBLADA RESTAURACIÓN, S.L.SOBLADA RESTAURACIÓN, S.L. was fined by the AEPD EUR 4,500 for installing a video surveillance system without proper signage. The company also failed to inform employees about the system and its purposes, breaching GDPR Articles 5(1)(c) and 13.ESAEPDGDPR€4,500
07 May 2014TELEFÓNICA MÓVILES ESPAÑA, SAUTELEFÓNICA MÓVILES ESPAÑA, SAU was fined by the AEPD €1,200 for sending an unauthorized commercial SMS. The recipient was listed on the Robinson List, which constituted a breach of Article 21 of the LSSI.ESAEPDePrivacy€1,200
01 Jan 2019TWITTER INTERNATIONAL COMPANY (TWITTER SPAIN, S.L.)Twitter International Company (Twitter Spain, S.L.) was fined EUR 30,000 by the AEPD. The authority found inadequate cookie information and the use of cookies without obtaining user consent, in breach of the LSSI.ESAEPDePrivacy€30,000
08 Feb 2023VODAFONE SERVICIOS, S.L.U.VODAFONE SERVICIOS, S.L.U. was fined by the AEPD 70,000 EUR for a SIM card duplication incident. The incident resulted in identity theft and unauthorized access to a bank account, indicating a breach of data protection rules.ESAEPDGDPR€70,000
23 Oct 2013AUTOESCUELA XXXXXXAUTOESCUELA XXXXXX was fined by the AEPD for sending unsolicited commercial emails without providing a simple and free way to object. The authority found a breach of Article 21.2 of the LSSI.ESAEPDePrivacy€600