Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
29 Apr 2022	EDITORIAL PRENSA CANARIA, S.A.The company was fined by the AEPD 50,000 EUR for publishing audio of a victim's testimony in a high-profile court case. The authority found a breach of data protection principles.	ES	AEPD	GDPR	€50,000	↗
06 Mar 2020	BANCO BILBAO VIZCAYA ARGENTARIA, S.A.BBVA was fined by the AEPD for inaccurate processing of personal data. The bank demanded payment for a debt the complainant did not owe and shared the complainant’s personal data with a debt collection agency.	ES	AEPD	GDPR	€60,000	↗
02 Feb 2023	VODAFONE ESPAÑA, S.A.U.Vodafone España was fined by the AEPD for changing a customer's contract ownership and activating services without consent. The authority found a breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€200,000	↗
08 Jun 2017	THE PHONE HOUSE SPAIN, S.L.U.THE PHONE HOUSE SPAIN, S.L.U. was fined by the AEPD 2,500 EUR for sending commercial text messages without providing recipients with a simple and free way to object to the processing of their data for promotional purposes. The case concerned non-compliance with the LSSI rules on marketing communications.	ES	AEPD	ePrivacy	€2,500	↗
27 Jul 2012	VIPVENTA, S.L.VIPVENTA, S.L. was fined EUR 30,001 by the AEPD for sending unsolicited commercial emails to the complainant. The authority found this conduct breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
06 Jun 2020	GLOBAL BUSINESS TRAVEL SPAIN S.L.U.An employee of GLOBAL BUSINESS TRAVEL SPAIN S.L.U. improperly accessed and disclosed an individual's health data. The AEPD found this to be a breach of the integrity and confidentiality principles under data protection law.	ES	AEPD	GDPR	€5,000	↗
08 Jul 2024	CALLBELL S.A.S.CALLBELL S.A.S. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited commercial messages to a complainant despite a request to stop. The authority found this conduct breached Article 21 of the LSSI.	ES	AEPD	ePrivacy	€5,000	↗
03 Nov 2015	VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS was fined EUR 20,000 by the AEPD for continuing to send newsletters to the complainant despite multiple unsubscribe requests. The authority found this conduct breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€20,000	↗
02 Jul 2020	CENTRO INTERNACIONAL DE CRECIMIENTO LABORAL Y PROFESIONAL, S.L.The entity sent unsolicited commercial emails without the recipients’ consent. It also failed to provide a valid unsubscribe option, which breached the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
01 Sept 2020	B.B.B.The entity was fined by the AEPD €5,000 for using a webcam to record video and audio without justification. The conduct infringed privacy by monitoring private conversations and activities inside a rented residence.	ES	AEPD	GDPR	€5,000	↗
31 May 2023	VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 70,000 EUR for failing to implement adequate security measures. This allowed a third party to impersonate a customer, change contact details, and gain unauthorized access to personal and banking data.	ES	AEPD	GDPR	€70,000	↗
01 Jun 2021	RADIO POPULAR S.A.RADIO POPULAR S.A. was fined EUR 2,000 by the AEPD for not providing users with the option to reject cookies on its website. The authority found this practice non-compliant with data protection rules and consent requirements.	ES	AEPD	ePrivacy	€2,000	↗
03 May 2016	REAL AUTOMOVIL CLUB DE ESPAÑAREAL AUTOMOVIL CLUB DE ESPAÑA was fined by the AEPD EUR 1,000 for sending unsolicited commercial emails despite the recipient's requests to unsubscribe. The authority found a breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
13 Feb 2023	FUNDACIÓN PRIVADA UNIVERSITARIA EADAThe entity used a participant’s image in a promotional activity without obtaining consent. This constituted a breach of data protection rules and resulted in a fine imposed by the AEPD.	ES	AEPD	GDPR	€2,000	↗
01 Jan 2015	WERBUNG INTERNET S.L.WERBUNG INTERNET S.L. was fined by the AEPD €1,000 for sending unsolicited commercial emails without prior consent. The conduct breached Article 21.1 of the LSSI on electronic marketing communications.	ES	AEPD	ePrivacy	€1,000	↗
17 Nov 2020	PEDROSO Y GÓMEZ ASESORÍA DE EMPRESAS, S.L.The company was fined by the AEPD in the amount of 6,000 EUR for sending emails without the recipients' consent. The authority also noted the absence of contact information for exercising data protection rights.	ES	AEPD	GDPR	€6,000	↗
22 Jun 2020	PARTIT DELS SOCIALISTES DE CATALUNYA (PSC-PSOE)PSC-PSOE was fined by the AEPD 5,000 EUR for using personal data obtained in a doctor-patient relationship to send requests for political support. The authority found this breached purpose limitation rules for data processing.	ES	AEPD	GDPR	€5,000	↗
01 Jan 2015	ZOWROOM, S.L.ZOWROOM, S.L. was fined by the AEPD EUR 500 for sending unsolicited commercial emails. The authority also found that unsubscribe requests were not honored, which constitutes a breach of the LSSI.	ES	AEPD	ePrivacy	€500	↗
29 Jan 2020	CASA GRACIO OPERATION, SLUCASA GRACIO OPERATION, SLU was fined by the AEPD 10,000 EUR for installing a video surveillance system that could capture public areas and access points. The authority found that this processing breached data protection rules.	ES	AEPD	GDPR	€10,000	↗
23 Jan 2025	XFERA MÓVILES, S.A.XFERA MÓVILES, S.A. was fined 100,000 EUR by the AEPD for inaccuracies in data retention relating to SIM card purchasers. The authority found a breach of the GDPR data accuracy obligation.	ES	AEPD	GDPR	€100,000	↗

Fine Tracker.