Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
23 May 2022	MH VILASECA S.L.MH VILASECA S.L. was fined by the AEPD 400 EUR for installing a video surveillance system without the required informational signage. The authority found this to be a breach of Article 13 GDPR.	ES	AEPD	GDPR	€400	↗
04 Aug 2022	AUTOBIZ, S.A. SUCURSAL EN ESPAÑAAUTOBIZ, S.A. Sucursal en España was fined by the AEPD €800 for sending unsolicited marketing messages. The authority also found that the company failed to provide a functional opt-out mechanism, breaching Article 21 of the LSSI.	ES	AEPD	ePrivacy	€800	↗
21 Jan 2019	XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined by the AEPD in the amount of 2,500 EUR for sending unsolicited commercial SMS messages. The authority found that this conduct breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€2,500	↗
05 Jul 2024	PUBLICACIONES Y EDICIONES BARACA 208, S.L.The company published personal data, including health information, in a digital newspaper article. The authority found a breach of data minimisation and the rules on special category data under GDPR Articles 5(1)(c) and 9.	ES	AEPD	GDPR	€10,000	↗
26 May 2023	B.B.B.The entity was fined EUR 300 by the AEPD for operating a video surveillance system that captured public areas without proper informational signage. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€300	↗
06 Jan 2022	B.B.B.A fine was imposed for the mass dissemination of a video recorded without the victim’s consent on social media and via WhatsApp. The authority found a breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€10,000	↗
04 Feb 2020	BAZAR SUSANABAZAR SUSANA was fined EUR 4,000 by the AEPD for improperly obtaining and disseminating personal images from a video surveillance system. The case concerns a breach of data protection rules and the unlawful processing of CCTV footage.	ES	AEPD	GDPR	€4,000	↗
08 Jan 2026	MEDIOS DE PREVENCIÓN EXTERNOS SUR, S.L.The company suffered a ransomware attack that caused a breach of the confidentiality and availability of personal data. AEPD found a violation of Article 5(1)(f) GDPR.	ES	AEPD	GDPR	€60,000	↗
01 Jan 2016	VODAFONE ONO, S.A.U.Vodafone Ono, S.A.U. was fined by the AEPD 6,000 EUR for sending unsolicited advertising SMS messages to a complainant. The complainant's data had previously been canceled, indicating a breach of data handling and marketing communication rules.	ES	AEPD	ePrivacy	€6,000	↗
05 Jul 2023	BILBAO AD INFINITUM, S.L.BILBAO AD INFINITUM, S.L. was fined by the AEPD EUR 500 for installing surveillance cameras directed at a public square without prior administrative authorization. The authority found that this conduct breached GDPR requirements on lawful processing.	ES	AEPD	GDPR	€500	↗
16 Jul 2020	TELEFÓNICA DE ESPAÑA, S.A.U.TELEFÓNICA DE ESPAÑA, S.A.U. was fined EUR 55,000 by the AEPD for processing personal data without consent. The company registered phone lines and charged invoices to an individual who had not authorized these actions.	ES	AEPD	GDPR	€55,000	↗
06 Apr 2020	PETROLIS INDEPENDENTS, S.L.PETROLIS INDEPENDENTS, S.L. was fined by the AEPD in the amount of 3,000 EUR for failing to comply with data protection rules regarding cookie policies on its website. The case concerned information requirements and the compliance of cookie mechanisms with privacy rules.	ES	AEPD	ePrivacy	€3,000	↗
29 Nov 2022	B.B.B.The entity was fined by the AEPD EUR 300 for installing surveillance cameras that recorded images and sound in public and communal areas without the required authorization. This constituted a breach of data protection rules.	ES	AEPD	GDPR	€300	↗
01 Jan 2023	QUALITY-PROVIDER S.A.QUALITY-PROVIDER S.A. was fined 20,000 EUR by the AEPD for unlawfully obtaining personal data from a website. The data was then used for promotional purposes without the consent of the data subjects.	ES	AEPD	GDPR	€20,000	↗
01 Jan 2014	DIVER KARTING, S.L.DIVER KARTING, S.L. was fined by the AEPD in the amount of EUR 2,300 for continuing to send commercial communications after the individual exercised the right to object and requested to unsubscribe. The case concerns failure to respect a valid opt-out from direct marketing.	ES	AEPD	ePrivacy	€2,300	↗
04 Jul 2023	BALLESPE, S.LBALLESPE, S.L was fined by the AEPD in the amount of 500 EUR for installing surveillance cameras that captured public areas without proper signage. The case concerns a breach of data protection rules and the duty to inform individuals being recorded.	ES	AEPD	GDPR	€500	↗
18 Jan 2022	MAJESTIC SOLUTIONS S.L.MAJESTIC SOLUTIONS S.L. was fined by the AEPD 10,000 EUR for failing to provide all required information to affected individuals after a personal data security breach. The authority found a breach of Article 34(2) GDPR.	ES	AEPD	GDPR	€10,000	↗
26 Oct 2020	ESTILO 1221, S.C.ESTILO 1221, S.C. was fined by the AEPD EUR 1,500 for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21.1 of the LSSI, which prohibits this type of marketing communication without prior consent.	ES	AEPD	ePrivacy	€1,500	↗
24 May 2023	PARTIDO LOCAL DE VILLANUEVA DEL PARDILLOPartido Local de Villanueva del Pardillo was fined EUR 500 by the AEPD for publishing an image on Facebook without the data subject's consent. The authority found a breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€500	↗
10 Jan 2026	MULTISPORTS GALICIA, S.L.MULTISPORTS GALICIA, S.L. was fined by the AEPD EUR 6,000 for failing to implement appropriate technical and organizational measures proportionate to the risk. The weakness allowed easy access to personal data of race participants through its website.	ES	AEPD	GDPR	€6,000	↗

Fine Tracker.