BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 22 Jun 2023 | Maviglia Assicurazioni snc di Gherardo Maviglia & c.Maviglia Assicurazioni was fined 5,000 EUR by the Garante for failing to deactivate former employees' email accounts. This allowed unauthorized access to data and breached data protection rules. | IT | Garante | GDPR | €5,000 | ↗ |
| 22 Jun 2023 | Autostrade per l’Italia S.p.A.Autostrade per l’Italia S.p.A. was fined by the Garante EUR 1,000,000 for violations linked to an application that processed users’ personal data. The app was used to handle refunds of highway ticket costs for delays caused by construction works. | IT | Garante | GDPR | €1,000,000 | ↗ |
| 22 Jun 2023 | Spaziani FabrizioThe Garante fined Spaziani Fabrizio EUR 1,000 for non-compliant video surveillance practices. The case involved cameras that were not properly signposted and may have captured public areas. | IT | Garante | GDPR | €1,000 | ↗ |
| 22 Jun 2023 | COLEGIO VIRGEN DE EUROPA, S.L.The school processed and published images of a 3-year-old child on Facebook and WhatsApp without parental consent. This disregarded the parents’ explicit refusal and led to a fine imposed by the AEPD. | ES | AEPD | GDPR | €15,000 | ↗ |
| 22 Jun 2023 | VODAFONE ESPAÑA, S.A.U.Vodafone España, S.A.U. was fined by the AEPD in the amount of 100,000 EUR for issuing a SIM card duplicate without the customer's consent. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €100,000 | ↗ |
| 22 Jun 2023 | LOCAL VERTICALS, S.L.LOCAL VERTICALS, S.L. was fined EUR 4,000 by the AEPD for failing to provide information about the website owner and for not having a privacy policy. The case concerns breaches of data protection information obligations. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 21 Jun 2023 | Dane anonimowe (H. Sp. z o.o. z siedzibą w W. przy Al.)UODO imposed a PLN 33,012 fine on H. Sp. z o.o. The penalty was issued because the company failed to provide the President of the Personal Data Protection Office with access to information necessary to perform supervisory duties. | PL | UODO | GDPR | €7,447 | ↗ |
| 21 Jun 2023 | B.B.B.The entity installed a video surveillance system that captured images beyond its property boundaries. This infringed the privacy of neighboring properties and led to a fine by the AEPD. | ES | AEPD | GDPR | €300 | ↗ |
| 21 Jun 2023 | Vodafone România SAVodafone România SA was fined €1,000 by ANSPDCP. The authority found that the company violated the complainant’s right of access by refusing to provide certain call center recordings. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Jun 2023 | CARRETERAS Y ASFALTOS, S.L.The company installed surveillance cameras that recorded both image and audio without proper signage or informing employees. This breached data protection requirements. | ES | AEPD | GDPR | €3,000 | ↗ |
| 20 Jun 2023 | Dante International SADante International SA was fined EUR 30,000 by the Romanian authority ANSPDCP. The sanction concerned violations linked to complaints filed by three individuals from Hungary. | RO | ANSPDCP | GDPR | €30,000 | ↗ |
| 20 Jun 2023 | Dante International SADante International SA was fined EUR 10,000 by ANSPDCP for additional violations related to complaints from three individuals in Hungary. The case concerned irregularities identified during the handling of those complaints. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 16 Jun 2023 | Department of HealthThe Irish DPC fined Department of Health €22,500 in inquiry IN-21-3-2. The fine has been collected. | IE | DPC | GDPR | €22,500 | ↗ |
| 16 Jun 2023 | Anonymisiert (DSB 2023-0.404.421)An individual processed personal data without a legal basis by storing contact details on a private phone for political advertising. The DSB imposed a EUR 1,000 fine for breaching GDPR lawfulness requirements. | AT | DSB | GDPR | €1,000 | ↗ |
| 16 Jun 2023 | B.B.B.The entity was fined for installing a surveillance camera in a rented property without informing the tenant. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €5,300 | ↗ |
| 16 Jun 2023 | BORSA MEDIC, S.L.BORSA MEDIC, S.L. was fined 10,000 EUR by the AEPD for failing to comply with a data deletion request and for sending unsolicited advertising emails after the recipient objected. The case concerns breaches of data protection and electronic commerce rules. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 15 Jun 2023 | Artima S.A.Artima S.A. was fined EUR 8,000 by ANSPDCP for a data breach. The incident exposed personal images, vehicle registration numbers, and vehicle details, indicating a breach of internal procedures and data confidentiality. | RO | ANSPDCP | GDPR | €8,000 | ↗ |
| 15 Jun 2023 | SOCIÉTÉ SPÉCIALISÉE DANS L'AFFICHAGE DE PUBLICITÉS CIBLÉES SUR LE WEBThe CNIL imposed a fine of 40 million euros on the company. The decision concerns identified breaches of rules under the authority's supervision. | FR | CNIL | GDPR | €40,000,000 | ↗ |
| 14 Jun 2023 | B.B.B.The entity was fined EUR 300 by the AEPD for installing a camera on the exterior facade of a building, aimed at public space, without the required administrative authorization. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 13 Jun 2023 | JUNTA DE CONSERVACION SECTOR RESIDENCIAL ELORDIGAN SATThe entity was fined by the AEPD for installing a video surveillance system with inadequate signage. The notices did not identify the data controller or provide contact details for exercising data subject rights, breaching Article 13 GDPR. | ES | AEPD | GDPR | €500 | ↗ |