BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 13 Jun 2024 | RETSINNAL GROUP, S.L.U.RETSINNAL GROUP, S.L.U. was fined by the AEPD in the amount of 10,000 EUR for failing to comply with cookie management rules on its website. The breach concerned Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 18 Mar 2023 | TOTALENERGIES CLIENTES, S.A.TOTALENERGIES CLIENTES, S.A. was fined EUR 200,000 by the AEPD for linking a customer’s personal data to a third party during gas supply service registration. The authority found this breached data protection principles. | ES | AEPD | GDPR | €200,000 | ↗ |
| 01 Jan 2020 | DESOLASOL RESTAURACIÓN, S.L.The restaurant disclosed a customer's complaint form to other patrons, breaching data protection principles. The case involved unauthorized disclosure of personal information contained in the complaint document. | ES | AEPD | GDPR | €6,000 | ↗ |
| 15 Jul 2013 | ENTABAN SERVICIOS, S.C.ENTABAN SERVICIOS, S.C. was fined by the AEPD EUR 600 for sending unsolicited commercial emails. The messages did not include a means for recipients to opt out, which breached Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 01 Jan 2023 | GENERAL LOGISTICS SYSTEMS SPAIN, S.A.GENERAL LOGISTICS SYSTEMS SPAIN, S.A. was fined by the AEPD 140,000 EUR for processing the personal data of two complainants without proper authorization. The breach resulted in identity theft and misuse of personal data. | ES | AEPD | GDPR | €140,000 | ↗ |
| 09 Jul 2025 | SOCIEDAD DE GESTIÓN DE ACTIVOS PROCEDENTES DE LA REESTRUCTURACIÓN BANCARIA, S.A. (SAREB)SAREB was fined €300,000 by the AEPD for breaches of GDPR Articles 5(1)(f) and 28. The case concerned data protection failures and insufficient contractual oversight of data processing activities. | ES | AEPD | GDPR | €300,000 | ↗ |
| 01 Jan 2014 | ARABBESKO MADRILEÑA, S.L.ARABBESKO MADRILEÑA, S.L. was fined by the AEPD EUR 1,200 for sending unsolicited SMS advertising to a user registered on the Robinson List. The authority found a breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €1,200 | ↗ |
| 25 Mar 2014 | GRUPO A4 - FORMACIÓN S.C.GRUPO A4 - FORMACIÓN S.C. was fined by the AEPD 1,800 EUR for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI despite prior requests for data cancellation. | ES | AEPD | ePrivacy | €1,800 | ↗ |
| 12 Jul 2022 | PUNTO ROJO LIBROS, S.LPUNTO ROJO LIBROS, S.L was fined EUR 800 by the AEPD for sending commercial emails without the recipient’s consent. The conduct breached Article 21 of the LSSI, which requires prior consent for this type of communication. | ES | AEPD | ePrivacy | €800 | ↗ |
| 23 Jan 2023 | ENFOKA SISTEMAS GLOBALES, S.L.ENFOKA SISTEMAS GLOBALES, S.L. was fined by the AEPD 30,000 EUR for processing personal data without consent. The company signed an energy supply contract in the complainant's name without their knowledge, which breaches Article 6(1) of the GDPR. | ES | AEPD | GDPR | €30,000 | ↗ |
| 27 Apr 2023 | B.B.B.The entity was fined by the AEPD in the amount of EUR 1,000 for installing surveillance cameras without proper signage and justification. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €1,000 | ↗ |
| 22 Jun 2023 | VODAFONE ESPAÑA, S.A.U.Vodafone España, S.A.U. was fined by the AEPD in the amount of 100,000 EUR for issuing a SIM card duplicate without the customer's consent. The authority treated this as a breach of data protection rules. | ES | AEPD | GDPR | €100,000 | ↗ |
| 01 Jan 2015 | BUSCANDO SUERTE S.L.BUSCANDO SUERTE S.L. was fined by the AEPD €2,300 for sending unsolicited SMS messages. The messages misled recipients into replying and caused charges without any legitimate purpose. | ES | AEPD | ePrivacy | €2,300 | ↗ |
| 06 Apr 2021 | CAFFE VECCHIO, S.L.CAFFE VECCHIO, S.L. was fined by the AEPD EUR 1,500 for publishing an individual's personal data in response to negative Google reviews. The disclosure included the person's name and details of an employment sanction. | ES | AEPD | GDPR | €1,500 | ↗ |
| 22 Jun 2023 | LOCAL VERTICALS, S.L.LOCAL VERTICALS, S.L. was fined EUR 4,000 by the AEPD for failing to provide information about the website owner and for not having a privacy policy. The case concerns breaches of data protection information obligations. | ES | AEPD | ePrivacy | €4,000 | ↗ |
| 21 Oct 2020 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD EUR 60,000 for processing personal data without proper consent. The case involved a customer receiving a notification of a purchase they had not made, indicating improper use of personal data. | ES | AEPD | GDPR | €60,000 | ↗ |
| 01 Jan 2023 | GLOVOGLOVO was fined EUR 15,000 by the AEPD for failing to properly handle a data access request. The authority found a breach of Article 15 of the GDPR. | ES | AEPD | GDPR | €15,000 | ↗ |
| 27 May 2019 | VODAFONE ESPAÑA, S.A.U.Vodafone España, S.A.U. was fined 35,000 EUR by the AEPD for processing personal data without consent. The case involved charging a former customer for services not contracted due to a technical error. | ES | AEPD | GDPR | €35,000 | ↗ |
| 01 Jan 2015 | 1GLOBAL JPPI, S.L.1GLOBAL JPPI, S.L. was fined by the AEPD 1,400 EUR for sending unsolicited commercial emails without prior recipient consent. The conduct breached Article 21 of the LSSI on electronic marketing communications. | ES | AEPD | ePrivacy | €1,400 | ↗ |
| 11 Feb 2022 | MOVALIA TRASLADOS, S.L.U.MOVALIA TRASLADOS, S.L.U. was fined EUR 2,000 by the AEPD for failing to allow users to give free and voluntary consent for data processing. The authority also found that the company did not properly inform affected individuals about the processing of their data, in breach of GDPR and LOPDGDD requirements. | ES | AEPD | GDPR | €2,000 | ↗ |