BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 19 May 2022 | B.B.B.B.B.B. was fined EUR 600 by the AEPD. The authority found that the video surveillance cameras were improperly oriented, capturing public areas and private property, and that adequate information on data processing responsibilities was not provided. | ES | AEPD | GDPR | €600 | ↗ |
| 30 Mar 2021 | PROMOTECH DIGITAL, S.L.PROMOTECH DIGITAL, S.L. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited SMS messages without recipient consent. The authority also found that the company did not provide an easy opt-out mechanism, in breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 14 May 2010 | ANUNTIS SEGUNDAMANO ESPAÑA S.L.UANUNTIS SEGUNDAMANO ESPAÑA S.L.U was fined by the AEPD EUR 600 for sending unsolicited commercial communications without proper consent. The conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 01 Jan 2014 | G.L. GISOFT ANALISIS Y DISEÑO S.L.G.L. GISOFT ANALISIS Y DISEÑO S.L. was fined by the AEPD €1,800 for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 08 Jun 2020 | G.L.P. Instalaciones 86, S.L.G.L.P. Instalaciones 86, S.L. was fined by the AEPD EUR 60,000 for processing personal data without a legal basis. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €60,000 | ↗ |
| 14 Mar 2013 | PONTE EN FORMA ONLINE, S.L.PONTE EN FORMA ONLINE, S.L. was fined by the AEPD EUR 50,000 for sending unsolicited commercial email communications. The conduct breached Article 21 of the LSSI, which restricts marketing emails sent without prior consent. | ES | AEPD | ePrivacy | €50,000 | ↗ |
| 29 Apr 2022 | TECH EDUCATION, RIGHTS & TECHNOLOGIES, S.L.TECH EDUCATION, RIGHTS & TECHNOLOGIES, S.L. was fined by the AEPD 1,500 EUR for sending unsolicited commercial communications after the complainant's data had been deleted. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,500 | ↗ |
| 20 Oct 2015 | AEROCLUB DEL SOLAEROCLUB DEL SOL was fined EUR 600 by the AEPD for sending unsolicited emails advertising airplane insurance. The authority found this breached Article 21.1 of the LSSI on commercial communications without prior consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 01 Jan 2025 | PROYECTOS VISUALES ZARAGOZA SLPROYECTOS VISUALES ZARAGOZA SL was fined by the AEPD 50,000 EUR for a personal data breach. The authority found that the company failed to ensure data integrity and confidentiality under Article 5(1)(f) GDPR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 01 Jan 2024 | DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 130,000 EUR for unauthorized SIM card duplication. The incident led to identity theft and fraudulent charges, and the authority found the data protection measures insufficient. | ES | AEPD | GDPR | €130,000 | ↗ |
| 28 Jul 2025 | KINYO, S.L.KINYO, S.L. was fined by the AEPD in the amount of 15,000 EUR for sending unsolicited commercial emails. The authority also found that recipients were not provided with an effective mechanism to opt out of future communications. | ES | AEPD | ePrivacy | €15,000 | ↗ |
| 11 Mar 2025 | LÁSER METALPRINT 3D, S.L.LÁSER METALPRINT 3D, S.L. was fined by the AEPD 10,000 EUR for deploying a video surveillance system without proper data processing agreements. The authority found a breach of GDPR Article 28. | ES | AEPD | GDPR | €10,000 | ↗ |
| 28 Apr 2026 | SIPHONE 2020, S.L.SIPHONE 2020, S.L. was fined by the AEPD 4,000 EUR for operating a video surveillance system that also recorded audio. Employees were not informed and did not consent, which breached privacy and data protection rules. | ES | AEPD | GDPR | €4,000 | ↗ |
| 02 Jun 2021 | TENTEA ENERGY, S.L.TENTEA ENERGY, S.L. was fined by the AEPD EUR 5,000 for using personal data and a signature without consent in connection with energy service contracts. The authority also found a refusal to provide access to personal data in relation to a cancellation request. | ES | AEPD | GDPR | €5,000 | ↗ |
| 29 Jan 2019 | LOS SEIS MAESTROS S.L.LOS SEIS MAESTROS S.L. was fined by the AEPD EUR 3,000 for processing personal data without consent. The breach involved sending an email offering a discount for an event, contrary to Article 6.1 of the LOPD. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 18 Apr 2024 | MOURO PRODUCCIONES, S.R.L.MOURO PRODUCCIONES, S.R.L. was fined by the AEPD 20,000 EUR for collecting copies of identity documents and personal data of minors and their guardians without proper data protection information. The authority found breaches of the data minimization and transparency principles. | ES | AEPD | GDPR | €20,000 | ↗ |
| 20 Apr 2016 | VODAFONE ONO, S.A.U.VODAFONE ONO, S.A.U. was fined 1,250 EUR by the AEPD for making unsolicited marketing calls and sending SMS messages to a non-customer. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,250 | ↗ |
| 16 Apr 2021 | CREATOR ENERGY, S.L.CREATOR ENERGY, S.L. was fined by the AEPD 6,000 EUR for using personal data without consent to contract gas, electricity, and maintenance services. The authority found this conduct breached Article 6(1)(b) GDPR. | ES | AEPD | GDPR | €6,000 | ↗ |
| 02 Dec 2019 | IMNOVA RESORT, S.L.IMNOVA RESORT, S.L. was fined by the AEPD EUR 3,000 for installing cookies on its online store without obtaining user consent. The authority found this conduct to be in breach of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 02 Mar 2022 | FUENTES VISIÓN, S.L.FUENTES VISIÓN, S.L. was fined by the AEPD 500 EUR for continuing to send marketing emails despite requests to unsubscribe and delete personal data. The authority found a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €500 | ↗ |