BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 01 Jan 2025 | ASESORAMOS TU FORMACIÓN CON CALIDAD S.L.ASESORAMOS TU FORMACIÓN CON CALIDAD S.L. was fined by the AEPD 10,000 EUR for processing personal data without a legal basis. The case also involved the improper inclusion of individuals in credit information systems. | ES | AEPD | GDPR | €10,000 | ↗ |
| 13 Jul 2022 | GRUPO TRANSAHER, S.L.GRUPO TRANSAHER, S.L. was fined by the AEPD 50,000 EUR for installing surveillance cameras in employee rest areas. The authority found that the company did not properly inform employees and may have infringed their privacy under the GDPR. | ES | AEPD | GDPR | €50,000 | ↗ |
| 23 Jan 2024 | CAJA RURAL DE BAENA NTRA. SRA. DE GUADALUPE, S.C.C.A.CAJA RURAL DE BAENA was fined by the AEPD 10,000 EUR for breaching data protection principles. The case involved failures in confidentiality and integrity of personal data, which led to unauthorized access by third parties. | ES | AEPD | GDPR | €10,000 | ↗ |
| 17 Feb 2021 | VODAFONE ONO, S.A.U.VODAFONE ONO, S.A.U. was fined by the AEPD 10,000 EUR for sending an unsolicited commercial SMS to a complainant without prior consent. The authority found that the message was sent without the required authorization. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 01 Jan 2013 | TELEFÓNICA MÓVILES ESPAÑA, SAUTELEFÓNICA MÓVILES ESPAÑA, SAU was fined EUR 600 by the AEPD for sending unsolicited advertising SMS messages to a former customer. The authority found that this breached Article 21 of the LSSI on commercial communications without the recipient’s consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 11 Feb 2025 | AD735 DATA MEDIA ADVERTISING, S.L.AD735 DATA MEDIA ADVERTISING, S.L. was fined by the AEPD 10,000 EUR for sending unsolicited email messages and failing to properly handle unsubscribe requests. The conduct breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 09 Mar 2021 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 100,000 by the AEPD for failing to permanently delete personal data after a request. As a result, the complainant continued to receive SMS messages. | ES | AEPD | GDPR | €100,000 | ↗ |
| 01 Jan 2012 | LET’s BONUS, S.L.LET’s BONUS, S.L. was fined EUR 34,001 by the AEPD for sending unsolicited commercial emails to a user. The conduct continued despite multiple requests to stop, which breached Article 21 of the LSSI. | ES | AEPD | ePrivacy | €34,001 | ↗ |
| 04 Aug 2014 | SERVICIOS DE DEPILACION BLOC, S.L.SERVICIOS DE DEPILACION BLOC, S.L. was fined by the AEPD 4,000 EUR for sending unsolicited commercial SMS messages to a former client. The conduct breached Article 21 of the LSSI on marketing communications without prior consent. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 19 Sept 2024 | CRIDOLMA BARCELONA S.L.CRIDOLMA BARCELONA S.L. was fined €9,000 by the AEPD for failing to properly handle a data subject access request. The case concerned a breach of Article 15 GDPR and non-compliance with a data protection authority resolution. | ES | AEPD | GDPR | €9,000 | ↗ |
| 23 May 2025 | OCI CINE, S.L.OCI CINE, S.L. was fined EUR 30,000 by the AEPD after an incident in which a user's personal information was auto-filled with another person's details in its app. The authority found a breach of data accuracy and processing security principles. | ES | AEPD | GDPR | €30,000 | ↗ |
| 13 Sept 2017 | MASTERZEN, S.L.MASTERZEN, S.L. was fined by the AEPD €4,500 for sending unsolicited marketing emails without the recipient’s consent. The emails were sent despite the recipient’s objection, indicating a breach of rules on direct electronic marketing. | ES | AEPD | ePrivacy | €4,500 | ↗ |
| 28 Nov 2024 | COMUNIDAD DE PROPIETARIOS A.A.A.The community of property owners was fined by the AEPD for publicly displaying personal data, including names and debt information. The authority found a breach of the confidentiality principle under GDPR. | ES | AEPD | GDPR | €1,000 | ↗ |
| 19 Dec 2023 | HIPERBAZAR YONGFA 2018 SLHIPERBAZAR YONGFA 2018 SL was fined by the AEPD 5,000 EUR for breaching data protection rules. The case involved the improper sharing of surveillance footage, which was later posted on Facebook, undermining confidentiality and data security requirements. | ES | AEPD | GDPR | €5,000 | ↗ |
| 01 Jul 2025 | HAMMERHOJ DESIGN, S.L.HAMMERHOJ DESIGN, S.L. was fined EUR 4,000 by the AEPD for publishing images of minors on Facebook without consent. The authority found this conduct to be in breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 17 Dec 2020 | LABORATORIO OCTOGÓN, S.L.LABORATORIO OCTOGÓN, S.L. was fined by the AEPD €1,000 for improperly positioning a surveillance camera. The camera captured third-party areas without justification, which breached data protection principles. | ES | AEPD | GDPR | €1,000 | ↗ |
| 01 Mar 2017 | FRONTERA SISTEMAS DE ESPAÑA SLFRONTERA SISTEMAS DE ESPAÑA SL was fined EUR 3,000 by the AEPD for installing cookies on users' devices without prior consent. The authority found this breached the information and consent requirements for data storage and retrieval devices. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 27 May 2022 | B.B.B.The entity was fined for improperly directing a surveillance camera toward public space without justification. The authority considered this a breach of data protection rules. | ES | AEPD | GDPR | €400 | ↗ |
| 17 Jan 2014 | CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD in the amount of 30,001 EUR for sending unsolicited commercial SMS messages. The authority also found that the messages did not include information on how to revoke consent, in breach of Article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 08 May 2024 | DIMAGAZA, S.L.DIMAGAZA, S.L. was fined by the AEPD 1,000 EUR for posting personal data of employees affected by a collective dismissal on a notice board accessible to outsiders. The authority found a breach of the principles of integrity and confidentiality. | ES | AEPD | GDPR | €1,000 | ↗ |