BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 02 Feb 2023 | TRACTAMENT D'AIGUES TEIA, S.L.TRACTAMENT D'AIGUES TEIA, S.L. was fined by the AEPD EUR 1,000 for failing to comply with a data subject's request to delete personal data. The case indicates non-compliance with GDPR obligations regarding the exercise of individual rights. | ES | AEPD | GDPR | €1,000 | ↗ |
| 28 Feb 2023 | PELAYO MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJAPelayo Mutua de Seguros y Reaseguros A Prima Fija was fined 70,000 EUR by the AEPD. The authority found that the company disclosed personal data to a third party without consent, breaching GDPR confidentiality and security obligations. | ES | AEPD | GDPR | €70,000 | ↗ |
| 26 Jun 2023 | B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for uploading sexual and personal content of an ex-partner to YouTube and ForoCoches without consent. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 15 Mar 2022 | JUNTA ADMINISTRADORA A.A.A.The entity was fined for displaying complainants’ personal data on a public notice board. This breached data protection rules and created a risk of unauthorized disclosure of personal information. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2020 | GROW BEATS SL.GROW BEATS SL. was fined 3,000 EUR by the AEPD for failing to provide required privacy policy information and for improper use of cookies without user consent. The case concerned website practices and indicates deficiencies in notice and consent requirements. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 22 Feb 2022 | RAMONA FILMS, S.L.RAMONA FILMS, S.L. was fined 10,000 EUR by the AEPD. The authority found processing of personal data of minors under 14 without proper consent and non-compliance with website cookie policy requirements. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 06 Feb 2023 | ROMBOC COMUNICACIONESROMBOC COMUNICACIONES was fined by the AEPD in the amount of 2,000 EUR for making misleading advertising calls without explicit consent from recipients. The case indicates a breach of data protection and direct marketing rules. | ES | AEPD | GDPR | €2,000 | ↗ |
| 30 Jun 2014 | ATRAPALO, S.L.ATRAPALO, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails to a user who had previously requested to unsubscribe. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 07 May 2021 | B.B.B.The entity was fined for improperly directing surveillance cameras toward public transit areas and the complainant's home entrance. This conduct breached data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 10 May 2021 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD for processing personal data without proper consent, in breach of Article 6(1) GDPR. The penalty was set at EUR 70,000, with reductions available for early payment and acknowledgment of responsibility. | ES | AEPD | GDPR | €70,000 | ↗ |
| 05 Aug 2020 | BANKIA, S.A.BANKIA, S.A. was fined by the AEPD 50,000 EUR for retaining a former client’s personal data for more than 16 years without a valid basis. The authority found this to be a breach of data protection principles, especially storage limitation. | ES | AEPD | GDPR | €50,000 | ↗ |
| 25 Sept 2020 | THE WASHPOINT S.L.THE WASHPOINT S.L. was fined by the AEPD 2,000 EUR for lacking a privacy policy and for having an improper cookie policy on its website. The breach concerned Article 13 of the GDPR and Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 21 Oct 2022 | CASAL DE L'ESPLUGA DE FRANCOLÍCASAL DE L'ESPLUGA DE FRANCOLÍ was fined by the AEPD for publishing a video on social media without consent. The recording showed a minor during a sports event, which constituted a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 05 Mar 2012 | GRANDES ALMACENES FNAC ESPAÑA S.A.The AEPD fined GRANDES ALMACENES FNAC ESPAÑA S.A. 36,000 EUR for sending unsolicited marketing emails to a customer who had opted out. The conduct breached the LSSI rules on electronic communications and recipient consent. | ES | AEPD | ePrivacy | €36,000 | ↗ |
| 01 Jan 2015 | CABLEUROPA SAUCABLEUROPA SAU was fined EUR 5,000 by the AEPD for sending unsolicited commercial emails and SMS messages to a customer. The recipient had previously exercised the right to cancel and opted out of receiving such communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2014 | HOSPITAL VETERINARIO LA MORALEJA, S.L.HOSPITAL VETERINARIO LA MORALEJA, S.L. was fined by the AEPD 5,000 EUR for sending unsolicited commercial communications by electronic means. The authority found that recipients were not given an option to object to receiving such messages. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2024 | ASOCIACIÓN ESCUELA NACIONAL DE EQUITACIÓNThe entity was fined €4,000 by the AEPD for processing personal data without a lawful basis and for failing to inform the data subject. The authority found breaches of Articles 6 and 14 of the GDPR. | ES | AEPD | GDPR | €4,000 | ↗ |
| 01 Jan 2020 | RADIOTELEVISIÓN DEL PRINCIPADO DE ASTURIASRADIOTELEVISIÓN DEL PRINCIPADO DE ASTURIAS was fined by the AEPD 20,000 EUR for retaining and processing images without a proper legal basis. The authority found a breach of data protection principles. | ES | AEPD | GDPR | €20,000 | ↗ |
| 31 Mar 2023 | APOLLONIA TOPCO, S.L.APOLLONIA TOPCO, S.L. was fined by the AEPD EUR 30,000 for improperly requesting copies of clients’ ID documents. The authority also noted a failure to respond to a data protection complaint, in breach of data minimization and purpose limitation principles. | ES | AEPD | GDPR | €30,000 | ↗ |
| 26 May 2023 | B.B.B.B.B.B. was fined EUR 300 by the AEPD for installing a video surveillance system that captured public areas and a private path without authorization. The authority found a breach of the data minimization principle under GDPR Article 5(1)(c). | ES | AEPD | GDPR | €300 | ↗ |