Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
18 May 2015	ENDESA ENERGÍA, S.A.U.ENDESA ENERGÍA, S.A.U. was fined by the AEPD 5,000 EUR for sending commercial emails to a recipient who had requested to unsubscribe. The case concerns a breach of Article 21.1 of the LSSI and shows failure to respect an opt-out request.	ES	AEPD	ePrivacy	€5,000	↗
18 Jan 2023	CONSEJERÍA DE CULTURA DE LA RIOJACONSEJERÍA DE CULTURA DE LA RIOJA was fined for failing to implement corrective measures after the unauthorized recording and dissemination of surveillance footage from the Museo de La Rioja. The authority found a breach of Article 32 GDPR concerning appropriate security measures.	ES	AEPD	GDPR	€3,000	↗
22 Nov 2021	COMUNIDAD DE PROPIETARIOS R.R.R.The entity was fined by the AEPD for operating a video surveillance system that recorded public transit areas without a justified basis. The authority found a breach of data protection principles.	ES	AEPD	GDPR	€3,000	↗
11 Jan 2023	KENAI MEDIA, S.L.KENAI MEDIA, S.L. was fined by the AEPD 10,000 EUR for processing personal data without a legal basis. The case concerned the publication of a video featuring the complainant without proper consent.	ES	AEPD	GDPR	€10,000	↗
20 Jul 2020	Telefónica Móviles España, S.A.U.Telefónica Móviles España, S.A.U. was fined by the AEPD €75,000 for charging a complainant for services linked to a third-party mobile number without consent. The authority found a breach of Article 6(1) GDPR because there was no lawful basis for the processing and related charges.	ES	AEPD	GDPR	€75,000	↗
12 Sept 2024	B.B.B.B.B.B. was fined by the AEPD €4,000 for failing to properly inform individuals about the presence of surveillance cameras. The authority also found the surveillance system disproportionate because it recorded audio and retained images longer than permitted.	ES	AEPD	GDPR	€4,000	↗
01 Jan 2014	WUAKI TV, S.L.WUAKI TV, S.L. was fined by the AEPD EUR 2,300 for sending unsolicited commercial emails to a user. The emails were sent after the company had confirmed the user's unsubscribe request and request to stop processing their data.	ES	AEPD	ePrivacy	€2,300	↗
08 Apr 2022	B.B.B.The entity was fined by the AEPD for recording audio through a video surveillance system without informing the employee. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€6,000	↗
05 Jul 2023	UPMOBILE SOLUTIONS, S.L.UPMOBILE SOLUTIONS, S.L. was fined EUR 500 by the AEPD for failing to provide access during the investigation. The authority treated this as a breach of Article 58(1) GDPR and an obstruction of its supervisory function.	ES	AEPD	GDPR	€500	↗
07 Jul 2010	TELEINFORMATICA Y COMUNICACIONES, S.A.U.TELEINFORMATICA Y COMUNICACIONES, S.A.U. was fined by the AEPD for sending unsolicited commercial SMS messages without prior consent. The conduct breached Article 21.1 of the LSSI on electronic marketing communications.	ES	AEPD	ePrivacy	€1,200	↗
01 Oct 2013	SERVITEL TEXNOX S.L.SERVITEL TEXNOX S.L. was fined EUR 600 by the AEPD for sending unsolicited commercial emails without recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications.	ES	AEPD	ePrivacy	€600	↗
01 Apr 2019	VODAFONE ONO, S.A.U.VODAFONE ONO, S.A.U. was fined by the AEPD EUR 60,000 for sending a marketing email that exposed the email addresses and names of more than eighty recipients. The authority found this breached the principles of data integrity and confidentiality.	ES	AEPD	GDPR	€60,000	↗
23 Sept 2014	XD SOFTWARE, S.L.XD SOFTWARE, S.L. was fined by the AEPD in the amount of 6,000 EUR for sending unsolicited commercial emails and messages without recipient consent. The conduct breached Article 21 of the LSSI and involved marketing communications sent without prior authorization.	ES	AEPD	ePrivacy	€6,000	↗
04 Mar 2021	CEDICO, CENTRO DE DIAGNÓSTICO POR LA IMÁGEN, S.L.CEDICO, a diagnostic imaging center, was fined EUR 30,000 by the AEPD. The authority found that the company unlawfully shared a patient's MRI report with a mutual insurance company, breaching data protection principles.	ES	AEPD	GDPR	€30,000	↗
01 Jan 2016	TOYS CENTRE, S.L.TOYS CENTRE, S.L. continued sending promotional emails to a complainant even after confirming removal from the mailing list. The AEPD fined the company for failing to comply with the requirements for commercial communications.	ES	AEPD	ePrivacy	€6,200	↗
06 Sept 2017	ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined EUR 66,000 by the AEPD for sending commercial SMS messages without consent. The authority also found that recipients were not given an effective option to object, in breach of the LSSI rules.	ES	AEPD	ePrivacy	€66,000	↗
24 Sept 2019	VUELING AIRLINES, S.L.VUELING AIRLINES, S.L. was fined by the AEPD 30,000 EUR for failing to comply with cookie consent requirements on its website. The authority found that the company did not provide the required information and did not properly obtain user consent.	ES	AEPD	ePrivacy	€30,000	↗
23 Jan 2024	CAJA RURAL NTRA MADRE DEL SOL S.C.A.C.CAJA RURAL NTRA MADRE DEL SOL S.C.A.C. was fined by the AEPD for a data breach that enabled unauthorized access to personal data. The authority found a violation of the confidentiality and integrity principles for personal data.	ES	AEPD	GDPR	€250,000	↗
06 Aug 2025	YUNEXPRESS SPAIN, S.L.YUNEXPRESS SPAIN, S.L. was fined EUR 9,000 by the AEPD for failing to formalize a data processing agreement and for inaccuracies in data handling. The authority found breaches of GDPR Articles 28(3) and 5(1)(d).	ES	AEPD	GDPR	€9,000	↗
08 Jun 2021	IMAGINA FRAN SPORT, S.L.IMAGINA FRAN SPORT, S.L. was fined 2,000 EUR by the AEPD for not having an updated privacy policy on its website. The authority found a breach of the information obligations under GDPR Article 13.	ES	AEPD	GDPR	€2,000	↗

Fine Tracker.