BULLETIN №082Last updated · 29 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 26 Jun 2017 | LEAD CONVERSION S.L.LEAD CONVERSION S.L. was fined by the AEPD 2,500 EUR for sending unsolicited commercial emails without prior recipient consent. The conduct breached electronic communications rules and marketing consent requirements. | ES | AEPD | ePrivacy | €2,500 | ↗ |
| 30 Jan 2023 | COMUNIDAD DE PROPIETARIOS RÍO CANARIOThe entity did not provide the requested information to the Spanish Data Protection Agency (AEPD). The conduct breached Article 58(1) of the GDPR and resulted in a 500 EUR fine. | ES | AEPD | GDPR | €500 | ↗ |
| 01 Jan 2021 | CLUB DEPORTIVO RITMO DE ANDALUCÍAThe club was fined by the AEPD 4,000 EUR for failing to adequately inform users about the processing of their personal data. The authority also found that users were not given the opportunity to provide free and voluntary consent for each specific processing purpose. | ES | AEPD | GDPR | €4,000 | ↗ |
| 23 Oct 2019 | SHOP MACOYN, S.L. (YBL ABOGADOS)SHOP MACOYN, S.L. was fined EUR 5,000 by the AEPD for disclosing email addresses in promotional emails. The case concerned a breach of data protection principles and the confidentiality of recipients’ personal data. | ES | AEPD | GDPR | €5,000 | ↗ |
| 03 Nov 2015 | VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined by the AEPD EUR 20,000 for continuing to send marketing emails to a user who had repeatedly requested to unsubscribe. The authority found this to be a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 10 Jun 2022 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined 50,000 EUR by the AEPD for processing personal data without consent. The breach resulted in identity theft in a phone contract. | ES | AEPD | GDPR | €50,000 | ↗ |
| 27 May 2022 | COMUNIDAD PROPIETARIOS ***COMUNIDAD.1The community of property owners was fined by the AEPD EUR 600 for using a surveillance system that recorded audio in common areas. The authority found the measure excessive and unnecessary and also noted insufficient information on the surveillance signs. | ES | AEPD | GDPR | €600 | ↗ |
| 01 Jan 2013 | CTI WEB SERVICIOS INFORMATICOS S.L.CTI WEB SERVICIOS INFORMATICOS S.L. was fined €600 by the AEPD for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which governs marketing communications without prior consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 24 Jul 2025 | CURENERGÍACURENERGÍA was fined by the AEPD EUR 1,000,000 for a data protection breach involving improper handling of personal data due to human error. The issue was corrected after notification. | ES | AEPD | GDPR | €1,000,000 | ↗ |
| 11 Nov 2021 | COMUNIDAD DE PROPIETARIOS R.R.R.The community of property owners was fined by the AEPD EUR 2,000 for sharing residents’ personal data with a security company without proper authorization or a contract. The disclosure included names, addresses, and financial information. | ES | AEPD | GDPR | €2,000 | ↗ |
| 17 Jul 2012 | FARMACIA INTERNACIONALFARMACIA INTERNACIONAL was fined by the AEPD EUR 1,800 for continuing to send electronic newsletters to a customer after the customer had unsubscribed. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 01 Jan 2016 | PROCTER & GAMBLE ESPAÑAProcter & Gamble España was fined 20,000 EUR by the AEPD for continuing to send marketing emails to a complainant after unsubscribe requests. The authority found this conduct breached the LSSI rules on electronic communications. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 30 Jun 2022 | B.B.B.The entity was fined EUR 300 by the AEPD for failing to display the required signage informing individuals about video surveillance at its premises. The authority treated this as a breach of the information obligations under Article 13 GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 05 Nov 2025 | RAMÓN GRAU, S.L.RAMÓN GRAU, S.L. was fined by the AEPD for installing a video surveillance system that recorded audio without informing employees. The authority found breaches of GDPR Articles 6(1) and 13 due to the lack of a valid legal basis and required transparency information. | ES | AEPD | GDPR | €30,000 | ↗ |
| 29 Jun 2018 | BANCO BILBAO VIZCAYA ARGENTARIA, S.A.Banco Bilbao Vizcaya Argentaria, S.A. was fined by the AEPD EUR 25,000 for sending unsolicited commercial messages. The authority found that recipients were not provided with a free opt-out mechanism. | ES | AEPD | ePrivacy | €25,000 | ↗ |
| 06 Jun 2017 | ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited advertising SMS messages to a complainant. The messages continued despite requests to stop such communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 03 May 2023 | B.B.B.A small hospitality establishment was fined 500 EUR by the AEPD for installing a surveillance camera that excessively recorded public areas. The authority found a breach of data protection rules. | ES | AEPD | GDPR | €500 | ↗ |
| 11 Oct 2023 | B.B.B.The entity installed surveillance cameras without consent in a rented equestrian club. The recordings captured minors and disabled individuals, which constituted a privacy violation. | ES | AEPD | GDPR | €2,000 | ↗ |
| 06 Apr 2017 | CLARIMARKET S.L.CLARIMARKET S.L. was fined EUR 600 by the AEPD. The sanction concerned sending unsolicited commercial emails in breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 31 Aug 2025 | DELAFRUIT, S.L.DELAFRUIT, S.L. was fined by the AEPD in the amount of 6,000 EUR for installing cameras in a break area without proper notice to affected individuals. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €6,000 | ↗ |