BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2019 | EL PERIODICO DE CATALUNYA, S.L.EL PERIODICO DE CATALUNYA, S.L. was fined by the AEPD 10,000 EUR for sending a commercial email after a data deletion request. The authority found this conduct to be in breach of Article 6 of the GDPR. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 Jan 2019 | COMERCIAL VIGOBRANDY, S.L.COMERCIAL VIGOBRANDY, S.L. was fined by the AEPD 1,500 EUR for installing a video surveillance camera without the required informational sign inside the premises. The case concerned a breach of data protection rules and the duty to properly inform individuals being recorded. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Jan 2019 | MAPEX AGENCIA CONSULTING, S.L.MAPEX AGENCIA CONSULTING, S.L. was fined by the AEPD 1,000 EUR for sending unsolicited emails promoting its services without prior recipient authorization. The conduct breached Article 21.1 of the LSSI on electronic commercial communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 01 Jan 2019 | VODAFONE ESPAÑA, S.A.U.The AEPD fined Vodafone España, S.A.U. 3,300 EUR for sending unsolicited commercial SMS messages despite the recipient's objection. This conduct breached Article 21 of the LSSI on commercial communications. | ES | AEPD | ePrivacy | €3,300 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES, S.A. (MASMOVIL)XFERA MÓVILES, S.A. (MASMOVIL) was fined by the AEPD €60,000 for changing a customer's contract details without proper consent. The authority found that the processing lacked a valid legal basis under GDPR Article 6(1)(a). | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | CORPORACION DE RADIO Y TELEVISION ESPAÑOLA SACORPORACION DE RADIO Y TELEVISION ESPAÑOLA SA was fined by the AEPD for a security incident involving the loss of unencrypted USB drives containing personal data. The authority found a breach of Article 32 GDPR on appropriate technical and organisational security measures. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | TELEFONICA DE ESPAÑA, S.A.U.Telefónica de España, S.A.U. was fined EUR 30,000 by the AEPD for charging a customer for a phone line they did not own. The authority found a breach of the GDPR data accuracy principle. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 Jan 2019 | B.B.B.B.B.B. was fined 2,000 EUR by the AEPD for reusing paper containing personal data. This made the data accessible to third parties without consent, constituting a breach of data protection rules. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2019 | CENTRO DE ESTUDIOS DIRIGIDOS DELTA, S.L.The entity sent a document via WhatsApp containing personal data of three individuals without their consent. This constituted a breach of data protection rules and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jan 2019 | COMUNIDAD DE PROPIETARIOS R.R.R.The community of property owners was fined by the AEPD for publicly displaying personal data taken from meeting minutes in the building elevators. The authority found that this constituted a breach of data protection rules. | ES | AEPD | GDPR | €15,000 | ↗ |
| 01 Jan 2019 | VODAFONE ESPAÑA, S.A.U.The AEPD fined Vodafone España, S.A.U. 30,000 EUR for changing a customer's phone plan and purchasing a mobile device without consent. The case concerns a breach of data protection rules and the absence of a valid legal basis for processing the customer's data. | ES | AEPD | GDPR | €30,000 | ↗ |
| 01 Jan 2019 | Morele.netMorele.net received an administrative fine from the President of the Personal Data Protection Office (UODO) for a GDPR violation. The 2,830,410 PLN penalty followed a phishing attack that led to unauthorized access to customer data affecting about 2.2 million people. | PL | President of the Personal Data Protection Office (UODO) | GDPR | €658,000 | ↗ |
| 01 Jan 2019 | TODO POR EL 431, S.L.TODO POR EL 431, S.L. was fined by the AEPD €4,000 for using surveillance cameras oriented toward public spaces without justified cause. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €4,000 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined EUR 60,000 by the AEPD for processing personal data without a legal basis. The authority found a breach of Article 6 GDPR, meaning the processing lacked a lawful basis. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | D. B.B.B.The respondent was fined for publishing intimate photos and conversations of the complainant on WhatsApp without consent. The authority found a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 01 Jan 2019 | Xfera Móviles, S.A.Xfera Móviles, S.A. was fined by the AEPD 70,000 EUR for the unauthorized disclosure of personal data caused by an error. The authority found a breach of the GDPR principle of integrity and confidentiality. | ES | AEPD | GDPR | €70,000 | ↗ |
| 01 Jan 2019 | LA ROCA NETWORKS, S.L.LA ROCA NETWORKS, S.L. was fined by the AEPD 2,500 EUR for sending unsolicited commercial emails without proper consent. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 01 Jan 2019 | XFERA MÓVILES S.A.XFERA MÓVILES S.A. was fined 60,000 EUR by the AEPD for processing personal data without consent. As a result, unauthorized contracts were sent to a customer, indicating improper use of personal data. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2019 | TWITTER INTERNATIONAL COMPANY (TWITTER SPAIN, S.L.)Twitter International Company (Twitter Spain, S.L.) was fined EUR 30,000 by the AEPD. The authority found inadequate cookie information and the use of cookies without obtaining user consent, in breach of the LSSI. | ES | AEPD | ePrivacy | €30,000 | ↗ |
| 01 Jan 2019 | QUESERIA ARTESANAL AMECO S.L.QUESERIA ARTESANAL AMECO S.L. was fined by the AEPD 5,000 EUR for processing personal data without consent. Customers were unaware of how their data had been obtained, indicating a breach of transparency and lawful processing requirements. | ES | AEPD | GDPR | €5,000 | ↗ |