BULLETIN №082Last updated · 02 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 15 Oct 2019 | Munkavállaló munkaeszközeinek ellenőrzéseThe controller unlawfully processed the complainant's personal data by reviewing and monitoring their email account without prior notice. This breached the principle of fair processing. | HU | NAIH | GDPR | €3,010 | ↗ |
| 05 May 2021 | Munkavállalói e-mail fiókok és munkaeszközök használatával és azok ellenőrzésével összefüggő adatkezelésThe controller did not provide the data subject with adequate prior information about the processing of work email and computer usage. The authority found this to breach the principles of fairness and accountability in data processing. | HU | NAIH | GDPR | €5,560 | ↗ |
| 29 Mar 2022 | Munkahelyi kamerás megfigyelés jogalapjának és arról való tájékoztatásnak jogszerűségeThe entity was fined for configuring CCTV cameras to monitor employees more broadly than necessary. The authority also found that the data processing notice was inadequate and that the legal basis was incorrectly set on employee consent instead of legitimate interest. | HU | NAIH | GDPR | €1,350 | ↗ |
| 14 Oct 2020 | Munkahelyi kamerás megfigyelés célhoz kötöttséggel, adattakarékossággal és az érintettek tájékoztatásával kapcsolatos hiányosságaiThe entity was fined by NAIH in the amount of HUF 700,000 for improperly implementing camera surveillance of employees. The authority also found that employees were not adequately informed about the scope and rules of the video monitoring. | HU | NAIH | GDPR | €1,925 | ↗ |
| 01 Jan 2021 | Município de LisboaThe Portuguese data protection authority fined Município de Lisboa EUR 1,250,000 in 2021. The sanction concerned the unlawful transfer of protesters’ personal data to the Russian Embassy in breach of the GDPR. | PT | Comissão Nacional de Proteção de Dados | GDPR | €1,250,000 | ↗ |
| 22 May 2012 | Municipal Water and Sewerage Company of RhodesThe Municipal Water and Sewerage Company of Rhodes was fined 5,000 EUR by the HDPA. The authority found that the company failed to satisfy the complainant’s data access rights and did not respond within the mandatory 15-day period. | GR | HDPA | GDPR | €5,000 | ↗ |
| 22 Feb 2023 | MUNDOVIAJES2010, S.L.MUNDOVIAJES2010, S.L. was fined by the AEPD in the amount of 7,000 EUR for processing personal data without consent. The authority also found a failure to provide the required information about data processing, in breach of GDPR Articles 6(1) and 14. | ES | AEPD | GDPR | €7,000 | ↗ |
| 11 Jun 2013 | MUNDO TOUR ESPAÑA, S.L.MUNDO TOUR ESPAÑA, S.L. was fined by the AEPD EUR 1,200 for sending commercial emails without the recipients’ consent. The conduct breached Article 21.2 of the LSSI on unsolicited commercial communications. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 10 Jan 2026 | MULTISPORTS GALICIA, S.L.MULTISPORTS GALICIA, S.L. was fined by the AEPD EUR 6,000 for failing to implement appropriate technical and organizational measures proportionate to the risk. The weakness allowed easy access to personal data of race participants through its website. | ES | AEPD | GDPR | €6,000 | ↗ |
| 23 Oct 2025 | Multimedia News Società CooperativaThe Garante fined Multimedia News Società Cooperativa EUR 20,000 for failing to provide a privacy notice and contact details for data requests on its website. The authority found this breached transparency obligations and data subject rights. | IT | Garante | GDPR | €20,000 | ↗ |
| 19 Apr 2023 | MULTIGAS ASESORES S.L.MULTIGAS ASESORES S.L. was fined EUR 500 by the AEPD. The company failed to provide access required under Article 58(1) GDPR, obstructing the data protection authority’s inspection function. | ES | AEPD | GDPR | €500 | ↗ |
| 27 Jul 2016 | MUDICOM IMPORT S.L.MUDICOM IMPORT S.L. was fined by the AEPD EUR 1,000 for sending unsolicited commercial emails without the recipient's consent. The authority found this conduct breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €1,000 | ↗ |
| 08 Sept 2014 | MUCHODESTINO, S.L.MUCHODESTINO, S.L. was fined by the AEPD €2,900 for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which restricts marketing communications without prior consent. | ES | AEPD | ePrivacy | €2,900 | ↗ |
| 26 Apr 2018 | MTS s.r.l.s.MTS s.r.l.s. was fined EUR 76,000 by the Garante for making unsolicited promotional calls. The company also failed to respond to the authority's request for information, which constituted a data protection breach. | IT | Garante | GDPR | €76,000 | ↗ |
| 17 May 2023 | M.S.M. Immobiliare s.r.l.M.S.M. Immobiliare s.r.l. was fined €1,000 by the Garante for a video surveillance system that captured areas beyond its property. The authority also found that proper informational signage was missing, in breach of data protection rules. | IT | Garante | GDPR | €1,000 | ↗ |
| 18 Oct 2011 | MSales GmbHMSales GmbH was fined EUR 30,001 by the AEPD for sending unauthorized SMS messages to a user of its service. The authority found this breached Article 21 of the LSSI on unsolicited electronic communications. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 06 Jun 2018 | MP Tuscolana s.r.l.MP Tuscolana s.r.l. was fined EUR 20,000 by the Garante for the unauthorized activation of two phone cards without the consent of the individuals concerned. The case indicates a failure to obtain valid consent before activating the services. | IT | Garante | GDPR | €20,000 | ↗ |
| 20 Aug 2021 | MOVE IrelandThe Irish DPC fined MOVE Ireland EUR 1,500 in case IN-20-7-1. The fine has been collected. | IE | DPC | GDPR | €1,500 | ↗ |
| 11 Feb 2022 | MOVALIA TRASLADOS, S.L.U.MOVALIA TRASLADOS, S.L.U. was fined EUR 2,000 by the AEPD for failing to allow users to give free and voluntary consent for data processing. The authority also found that the company did not properly inform affected individuals about the processing of their data, in breach of GDPR and LOPDGDD requirements. | ES | AEPD | GDPR | €2,000 | ↗ |
| 18 Apr 2024 | MOURO PRODUCCIONES, S.R.L.MOURO PRODUCCIONES, S.R.L. was fined by the AEPD 20,000 EUR for collecting copies of identity documents and personal data of minors and their guardians without proper data protection information. The authority found breaches of the data minimization and transparency principles. | ES | AEPD | GDPR | €20,000 | ↗ |