Order report
BULLETIN №082Last updated · 30 Jul 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.2%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
01 Jan 2024EDA TV CONSULTING S.L.EDA TV CONSULTING S.L. was fined 5,000 EUR by the AEPD for publishing a minor’s image without consent. The case concerns a breach of data protection rules and the child’s privacy rights.ESAEPDGDPR€5,000↗
01 Jan 2024ASOCIACIÓN ESCUELA NACIONAL DE EQUITACIÓNThe entity was fined €4,000 by the AEPD for processing personal data without a lawful basis and for failing to inform the data subject. The authority found breaches of Articles 6 and 14 of the GDPR.ESAEPDGDPR€4,000↗
01 Jan 2024Santander BankIn 2024, Santander Bank was fined 1,440,000 PLN by UODO. The sanction concerned the failure to report a personal data breach, which is a significant breach of GDPR obligations.PLUrząd Ochrony Danych OsobowychGDPR€331,000↗
01 Jan 2024REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS S.L.U.REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS S.L.U. was fined by the AEPD for processing personal data without consent, which led to unauthorized access to a customer's data. The authority also found inadequate security measures.ESAEPDGDPR€1,380,000↗
01 Jan 2024Unnamed data controllerNAIH imposed a HUF 50 million fine on an unnamed public body for failing to provide data to the Central Public Information Register. The case concerned non-publication of financial data required by law.HUNemzeti Adatvédelmi és Információszabadság HatóságGDPR€130,000↗
29 Dec 2023SOCIETE PERMETTANT D'EFFECTUER DES PAIEMENTS EN LIGNEA fine of EUR 105,000 was imposed by the CNIL. The case concerns a breach of personal data protection rules.FRCNILGDPR€105,000↗
29 Dec 2023CORPORACIÓN DUAL GRUPO LC, S.L.CORPORACIÓN DUAL GRUPO LC, S.L. was fined €500 by the AEPD for failing to provide access to personal data and information requested by the data protection authority. The case concerns non-compliance with GDPR obligations, including Article 58(1).ESAEPDGDPR€500↗
29 Dec 2023SOCIETE PROPOSANT DES SERVICES DE TELECOMUNICATIONCNIL imposed a fine of EUR 10,000,000 on SOCIETE PROPOSANT DES SERVICES DE TELECOMUNICATION. The case concerns breaches of personal data protection rules.FRCNILGDPR€10,000,000↗
29 Dec 2023SOCIETE DE SITES EN LIGNE DE JEUX-CONCOURS ET TESTS PRODUITSCNIL imposed a fine of 75,000 EUR on SOCIETE DE SITES EN LIGNE DE JEUX-CONCOURS ET TESTS PRODUITS and issued an injunction. The case concerns identified breaches of rules supervised by CNIL.FRCNILGDPR€75,000↗
29 Dec 2023SOCIETE DE CONSEIL EN SYSTEMES ET LOGICIELS INFORMATIQUESThe CNIL imposed a fine of EUR 100,000 on SOCIETE DE CONSEIL EN SYSTEMES ET LOGICIELS INFORMATIQUES. The case concerns a breach of personal data protection rules.FRCNILGDPR€100,000↗
27 Dec 2023MEDECIN PEDIATRE (procédure simplifiée)The CNIL imposed a 1,000 EUR fine on MEDECIN PEDIATRE under a simplified procedure. The case concerns a regulatory breach, with no further details provided in the record.FRCNILGDPR€1,000↗
27 Dec 2023SOCIETE DE SUPPORT LOGISTIQUECNIL imposed a fine of EUR 32 million on SOCIETE DE SUPPORT LOGISTIQUE. The case concerned identified regulatory violations, with no further details provided in the source data.FRCNILGDPR€32,000,000↗
27 Dec 2023COMITE SOCIAL ECONOMIQUE D'ENTREPRISES (procédure simplifiée)The CNIL imposed an administrative fine of 10,000 EUR on COMITE SOCIAL ECONOMIQUE D'ENTREPRISES under a simplified procedure. The case concerns a confirmed regulatory breach, with no further details provided in the record.FRCNILGDPR€10,000↗
27 Dec 2023ASSOCIATION PROMOUVANT DES ACTIONS AU SEIN D'UNE COMMUNE (procédure simplifiée)CNIL imposed a 5,000 EUR fine on ASSOCIATION PROMOUVANT DES ACTIONS AU SEIN D'UNE COMMUNE and issued an injunction. The case concerned a confirmed data protection breach handled under a simplified procedure.FRCNILGDPR€5,000↗
22 Dec 2023HISPAPOST, S.A.HISPAPOST, S.A. was fined EUR 60,000 by the AEPD for failing to properly safeguard and handle personal data. The incident resulted in the abandonment of 1,404 letters containing personal information, indicating inadequate data protection procedures.ESAEPDGDPR€60,000↗
21 Dec 2023Azienda socio-sanitaria localeThe Garante imposed a fine on a local health authority for violations related to the handling of sensitive personal data. The case concerned improper processing of special-category data, which breached data protection rules.ITGaranteGDPR€18,000↗
21 Dec 2023Gestioni Aziendali s.r.l.Gestioni Aziendali s.r.l. was fined by the Garante in the amount of 5,000 EUR for operating a video surveillance system at Hotel della Vittoria without appropriate informational signage. The authority found this to be a breach of GDPR transparency requirements toward monitored individuals.ITGaranteGDPR€5,000↗
21 Dec 2023Dane anonimowe (K. sp. z o.o. sp. k. z siedzibą w W. przy ul.)The President of UODO imposed a fine of PLN 18,864 on the company for failing to cooperate in the performance of the authority’s duties. The company also did not provide access to personal data and information necessary for the regulator’s tasks.PLUODOGDPR€4,346↗
21 Dec 2023MediafondMediafond was fined EUR 10,000 by the Garante for continuing to use a former employee’s email account after the employment ended. The company also forwarded emails without proper notice, which breached GDPR requirements.ITGaranteGDPR€10,000↗
21 Dec 2023Impresa individuale Macelleria Salumeria HalalThe Garante fined the owner of Impresa individuale Macelleria Salumeria Halal EUR 2,000 for operating a video surveillance system without adequate informational signage. The authority found a breach of GDPR transparency and data processing requirements.ITGaranteGDPR€2,000↗