Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
03 Dec 2019Nusvar ABNusvar AB was fined SEK 35,000 by IMY. The authority found unauthorized processing of personal data relating to criminal offenses and a failure to comply with data minimization principles in credit reporting activities.SEIMYGDPR€3,313
03 Dec 2019MYMOVILES EUROPA 2000, S.L.MYMOVILES EUROPA 2000, S.L. was fined by the AEPD €1,500 for failing to provide the required privacy information on its website. The authority found a breach of Article 13 GDPR.ESAEPDGDPR€1,500
04 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 5,000 EUR by the AEPD for failing to provide requested information. The case concerned a breach of obligations under data protection rules.ESAEPDGDPR€5,000
04 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 5,000 EUR for failing to provide the requested information. The case concerned a breach of obligations under data protection rules.ESAEPDGDPR€5,000
04 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 5,000 EUR by the AEPD for failing to provide requested information. The case concerns a breach of obligations under data protection rules.ESAEPDGDPR€5,000
04 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 5,000 by the AEPD for failing to provide requested information. The case concerned a breach of obligations under data protection rules.ESAEPDGDPR€5,000
05 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD EUR 30,000 for inaccurately processing personal data. The company claimed a debt for a service that had already been terminated and had no outstanding balance.ESAEPDGDPR€30,000
06 Dec 2019VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 5,000 EUR by the AEPD for failing to provide requested information. The case concerns a breach of obligations under data protection rules.ESAEPDGDPR€5,000
11 Dec 2019VODAFONE ONO, S.A.U.VODAFONE ONO, S.A.U. was fined EUR 5,000 by the Spanish Data Protection Agency (AEPD). The sanction concerned the failure to provide requested information, which breached GDPR requirements.ESAEPDGDPR€5,000
11 Dec 2019Volt munkavállaló e-mail-fiókjai archivált tartalmának tárolása és azokban történő dokumentumkeresésThe controller stored the complainant’s private correspondence without a lawful basis and searched archived email accounts for documents. The authority found a breach of data minimization and fairness principles.HUNAIHGDPR€1,510
11 Dec 2019VODAFONE ONO, S.A.U.VODAFONE ONO, S.A.U. was fined 5,000 EUR by the AEPD for failing to provide the requested information. The case concerned a breach of obligations under data protection rules.ESAEPDGDPR€5,000
11 Dec 2019Eni Gas e Luce S.p.A.Eni Gas e Luce S.p.A. was fined EUR 8,500,000 by the Garante for making unsolicited telemarketing calls without consent. The conduct also affected individuals who had opted out or were listed in the public opposition register.ITGaranteGDPR€8,500,000
17 Dec 2019ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined EUR 80,000 by the AEPD for using personal data to fraudulently contract phone lines without consent. The authority found a breach of Article 6(1) GDPR.ESAEPDGDPR€80,000
17 Dec 2019B.B.B.A private individual was fined by the AEPD for installing a camera aimed at a public space and a building entrance without justification. The authority found a breach of data protection principles.ESAEPDGDPR€2,000
18 Dec 2019GRUPO CAROLIZANGRUPO CAROLIZAN was fined EUR 3,000 by the AEPD for installing a video surveillance system that disproportionately captured public space. The authority found no sufficient justification for the scope of monitoring, which infringed the rights of third parties.ESAEPDGDPR€3,000
20 Dec 2019GESTHOTEL ACTIVOS BALAGARES S.L.GESTHOTEL ACTIVOS BALAGARES S.L. was fined by the AEPD 15,000 EUR for disclosing special categories of personal data, including medical information. The authority found a breach of the integrity and confidentiality principle under GDPR Article 5(1)(f).ESAEPDGDPR€15,000
20 Dec 2019Hozzáférési jog terjedelmeThe controller did not inform the data subject about actions taken on their requests within the required timeframe. It also failed to provide access to certain data, which constitutes a GDPR breach.HUNAIHGDPR€1,515
20 Dec 2019TECSIBLE, S.L.TECSIBLE, S.L. was fined by the AEPD 5,000 EUR for a data protection breach. The case involved unsolicited contact and messages sent to an individual on the Robinson list through a third-party call center.ESAEPDGDPR€5,000
20 Dec 2019Anonymizováno (ÚOOÚ UOOU-00136/19-31)The company was fined for disseminating commercial communications without a legal basis and without proper labeling. The authority found a breach of Czech rules on information society services.CZUOOUePrivacy€4,716
01 Jan 2020B.B.B.B.B.B. was fined by the AEPD in the amount of 1,000 EUR for sending a commercial SMS to the complainant after confirming deletion of the complainant’s personal data. The authority found this conduct to be a breach of Article 21 of the LSSI.ESAEPDePrivacy€1,000