Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
22 May 2018Wind Tre s.p.a.Wind Tre s.p.a. was fined by the Garante EUR 600,000 for conducting marketing campaigns without obtaining the required user consent. The conduct breached data protection rules.ITGaranteGDPR€600,000
18 Jun 2015Wind Telecomunicazioni SpaWind Telecomunicazioni Spa was fined EUR 130,000 by the Garante. The case concerned the unlawful disclosure of mobile phone numbers in the White Pages directory without proper consent.ITGaranteGDPR€130,000
09 Oct 2018WIND HELLAS TELECOMMUNICATIONS S.A.The fine was imposed for making unsolicited marketing calls to subscribers who had opted out of such contact. This conduct breached privacy and data protection rules.GRHDPAePrivacy€150,000
20 Mar 2008W.I. mind consulting s.r.l.W.I. mind consulting s.r.l. was fined by the Garante 6,000 EUR for sending unsolicited advertising by fax. The authority found that prior and adequate information required under Article 13 of the Italian Data Protection Code was not provided.ITGaranteGDPR€6,000
02 Mar 2023WILLOUGHBY COLLEGE, S.A.WILLOUGHBY COLLEGE, S.A. failed to provide requested information to the Spanish Data Protection Agency, which constituted a breach of Article 58.1 of the GDPR. A fine was imposed and reduced due to early payment and acknowledgment of responsibility.ESAEPDGDPR€1,500
10 Nov 2025Whitedecor SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in October 2025 at Whitedecor SRL and found violations of GDPR provisions. As a result, a fine of 1,000 EUR was imposed.ROANSPDCPGDPR€1,000
12 Jan 2023WhatsApp Ireland Ltd.The Irish DPC fined WhatsApp Ireland Ltd. EUR 5,500,000 in case IN-18-5-6. The decision is currently under appeal.IEDPCGDPR€5,500,000
20 Aug 2021WhatsApp Ireland LtdThe Irish DPC imposed a fine of EUR 225,000,000 on WhatsApp Ireland Ltd in inquiry IN-18-12-2. The decision is currently under appeal.IEDPCGDPR€225,000,000
01 Jan 2017WEWI MOBILE, S.L.WEWI MOBILE, S.L. was fined by the AEPD in the amount of €5,000 for sending unsolicited commercial messages to individuals without their prior consent. This conduct breached the LSSI rules on marketing communications.ESAEPDePrivacy€5,000
10 Oct 2024WerepairUK LtdWerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The ICO fined the company 80,000 GBP and issued an enforcement notice.GBICOePrivacy€95,592
01 Jan 2015WERBUNG INTERNET S.L.WERBUNG INTERNET S.L. was fined by the AEPD €1,000 for sending unsolicited commercial emails without prior consent. The conduct breached Article 21.1 of the LSSI on electronic marketing communications.ESAEPDePrivacy€1,000
08 Jun 2022Wens Experience SRLWens Experience SRL was fined EUR 1,500 by ANSPDCP for GDPR violations. The case concerned deficiencies by the company acting as a processor for a data controller.ROANSPDCPGDPR€1,500
16 Mar 2017Welcome s.a.s. di Somma MicheleWelcome s.a.s. di Somma Michele was fined EUR 16,000 by the Garante for making unsolicited promotional calls. The authority found that the required privacy notice was not provided and consent was not obtained.ITGaranteGDPR€16,000
04 Mar 2025WEBRASOFT SRLIn January 2025, the National Supervisory Authority for Personal Data Processing completed an investigation into WEBRASOFT SRL and found a breach of GDPR provisions. As a result, the operator was fined EUR 20,000.ROANSPDCPGDPR€20,000
16 Apr 2015Web performance s.r.l.Web performance s.r.l. was fined by the Garante for collecting personal data through website forms without proper consent. The authority found this to be a breach of data protection rules.ITGaranteGDPR€10,000
09 Jun 2022Webáruház adatkezelési tájékoztatójaThe authority found a GDPR breach because the website and online store did not provide clear and transparent information about personal data processing. A fine of 300,000 HUF was imposed.HUNAIHGDPRFt 300,000
20 Dec 2022Webáruház adatkezelése és törlési jog sérelmeThe authority found breaches of several GDPR provisions concerning information to data subjects, obtaining consent for marketing, and handling deletion requests. A fine of HUF 500,000 was imposed.HUNAIHGDPR€1,240
18 Jun 2025Waxholms Ångfartygs AB (WÅAB)IMY fined Waxholms Ångfartygs AB SEK 75,000 for processing personal data without a lawful basis. The authority also found processing of sensitive personal data without an applicable exception, in breach of GDPR Articles 6 and 9.SEIMYGDPR€6,802
10 Jun 2022WATYANA 786, S. L.WATYANA 786, S. L. was fined by the AEPD EUR 400 for failing to inform individuals about the use of video surveillance at its premises. The authority found a breach of Article 13 GDPR because the required information was not provided to data subjects.ESAEPDGDPR€400
29 Feb 2024WATIUM S.L.WATIUM S.L. was fined by the Spanish Data Protection Agency (AEPD) in the amount of EUR 160,000. The case concerned the failure to provide the required information, which constitutes a breach of Article 58.1 of the GDPR.ESAEPDGDPR€160,000