BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 18 Jul 2023 | Comune di ModicaThe Garante fined Comune di Modica EUR 45,000 for inadequate data protection measures linked to video surveillance in public areas. The issues affected a large number of individuals over an extended period, and those recorded were not properly informed. | IT | Garante | GDPR | €45,000 | ↗ |
| 18 Jul 2023 | Azienda Socio Sanitaria Territoriale (A.S.S.T.) Ovest MilaneseThe Garante fined Azienda Socio Sanitaria Territoriale (A.S.S.T.) Ovest Milanese 12,000 EUR for a data breach. Personal data was accessed without negative consequences for the data subjects. The organization took measures to prevent similar violations in the future. | IT | Garante | GDPR | €12,000 | ↗ |
| 18 Jul 2023 | Provvedimento del 18 luglio 2023 [9935503]A complaint was filed with the Garante concerning a surveillance system installed by an individual that may have captured footage of a public street. The authority found a GDPR breach and imposed a fine of EUR 400. | IT | Garante | GDPR | €400 | ↗ |
| 18 Jul 2023 | Università Telematica E-CampusUniversità Telematica E-Campus was fined EUR 75,000 by the Garante. The authority found that the university sent promotional SMS messages without consent and failed to respond to data deletion requests. These actions breached GDPR requirements. | IT | Garante | GDPR | €75,000 | ↗ |
| 18 Jul 2023 | Ermeslink di Giovanni Di StefanoThe Garante imposed a fine of EUR 5,000 on Ermeslink di Giovanni Di Stefano for improperly handling video surveillance data. The breach concerned data protection rules and could have affected all residents and non-residents of the Municipality of Modica. | IT | Garante | GDPR | €5,000 | ↗ |
| 18 Jul 2023 | Nicola PetrolitoThe Garante imposed a EUR 400 fine on Nicola Petrolito for operating a video surveillance system that captured areas owned by third parties and public passageways. The authority found that the required informational signage was missing, constituting a GDPR breach. | IT | Garante | GDPR | €400 | ↗ |
| 18 Jul 2023 | Maximum International Corp. S.r.l.The Garante fined Maximum International Corp. S.r.l. 5,000 EUR for making promotional calls without consent and for failing to respond to data access and deletion requests. The case concerns breaches of personal data processing rules and data subject rights. | IT | Garante | GDPR | €5,000 | ↗ |
| 18 Jul 2023 | Cat s.r.l.The Garante imposed a EUR 10,000 fine on Cat s.r.l. for operating a video surveillance system near waste bins in breach of the principles of lawfulness, fairness, and transparency. The case concerned the data of residents and non-residents of the Comune di Modica. | IT | Garante | GDPR | €10,000 | ↗ |
| 18 Jul 2023 | Dane anonimowe (K. za naruszenie przepisów art. 5 ust. 1 lit. f), art. 5 ust. 2, art. 25 ust. 1 oraz art. 32 ust. 1 i 2 rozporządzenia 2016/679)UODO imposed a fine on the controller for failing to implement appropriate technical and organizational measures when employees used portable company laptops. The authority also found a lack of regular testing, measuring, and evaluation of security measures, which breached the principles of integrity, confidentiality, and accountability. | PL | UODO | GDPR | €3,374 | ↗ |
| 17 Jul 2023 | HSSERVICE LIZCON SOLUTIONS, S.L.HSSERVICE LIZCON SOLUTIONS, S.L. was fined by the AEPD EUR 4,000 for failing to provide information about personal data processing when a customer brought in a TV for repair. The authority also found that the company’s website lacked the required data protection information. | ES | AEPD | GDPR | €4,000 | ↗ |
| 16 Jul 2023 | ALBEN AIRPORT FACILITIES S.L.ALBEN AIRPORT FACILITIES S.L. was fined 500 EUR by the AEPD for failing to provide access to information required under Article 58.1 of the GDPR. This obstructed the data protection authority’s supervisory and investigative functions. | ES | AEPD | GDPR | €500 | ↗ |
| 14 Jul 2023 | GLOBAL TELECOMUNICACIONES INTERRECARGAS, S.L.The entity was fined 1,000 EUR by the AEPD for sending an advertising SMS without the recipient’s prior consent. This constituted a breach of Article 21 of the LSSI on unsolicited commercial communications. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 14 Jul 2023 | PARTIDO POPULARPARTIDO POPULAR was fined by the AEPD 5,000 EUR for using an individual's image without consent in its electoral program. The case concerns a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 13 Jul 2023 | B.B.B.B.B.B. was fined by the AEPD 600 EUR for installing a surveillance camera directed at a public area without prior administrative authorization and without proper signage. The authority found breaches of Articles 5(1)(c) and 13 GDPR. | ES | AEPD | GDPR | €600 | ↗ |
| 13 Jul 2023 | EUROPA PRESS DE CATALUNYA, S.A.EUROPA PRESS DE CATALUNYA, S.A. was fined by the AEPD 50,000 EUR for publishing audio of a victim's court statement in a high-profile case. The authority found that the company processed excessive personal data in breach of GDPR Article 5(1)(c). | ES | AEPD | GDPR | €50,000 | ↗ |
| 12 Jul 2023 | Dane anonimowe (Panią K.W. prowadzącą działalność gospodarczą pod nazwą W. z miejscem wykonywania działalności w O. przy ul.)UODO imposed an administrative fine on the business for failing to report a personal data breach to the supervisory authority within 72 hours. The authority also found that the affected individuals were not notified without undue delay. | PL | UODO | GDPR | €2,651 | ↗ |
| 12 Jul 2023 | B.B.B.The entity installed a surveillance camera without authorization and captured images of communal areas. This breached Article 6(1) GDPR. | ES | AEPD | GDPR | €300 | ↗ |
| 10 Jul 2023 | C.C.C.The entity was fined for operating a video surveillance system that captured public areas and neighboring properties without the required authorization. Required informational signage was also not displayed. | ES | AEPD | GDPR | €600 | ↗ |
| 10 Jul 2023 | B.B.B.The AEPD imposed a 300 EUR fine on B.B.B. after a surveillance camera was directed toward the complainant's property. The authority found a breach of data protection rules due to unauthorized processing of image data. | ES | AEPD | GDPR | €300 | ↗ |
| 09 Jul 2023 | PROSULTING, S.L.N.E.PROSULTING, S.L.N.E. was fined by the AEPD in the amount of 1,000 EUR for failing to provide data subjects with the information required under Article 13 GDPR. The case concerned a lack of proper notice about the processing of personal data. | ES | AEPD | GDPR | €1,000 | ↗ |