BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 14 Dec 2021 | MALAGATROM, S.L.UMALAGATROM, S.L.U was fined by the AEPD in the amount of EUR 1,000 for failing to comply with a prior decision. That decision required the removal of comments containing personal data from its Amazon page and the implementation of measures to prevent similar incidents in the future. | ES | AEPD | GDPR | €1,000 | ↗ |
| 17 Jan 2022 | ***EMPRESA.1The entity was fined for improperly orienting surveillance cameras so they captured public pedestrian areas without justification. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 01 Mar 2022 | CLUB NATACIO LLEIDACLUB NATACIO LLEIDA installed a surveillance camera in a rented bar/restaurant without informing the tenant or displaying the required signage. The AEPD found this to be a breach of data protection rules. | ES | AEPD | GDPR | €1,200 | ↗ |
| 16 Feb 2026 | KONECTA BTO, S.L.KONECTA BTO, S.L. was fined by the AEPD EUR 500,000 for a personal data breach. The case involved unauthorized access to personal data, which breached the confidentiality principle under Article 5(1)(f) of the GDPR. | ES | AEPD | GDPR | €500,000 | ↗ |
| 17 Apr 2017 | WIZINK BANK S.A.WIZINK BANK S.A. was fined by the AEPD in the amount of 5,000 EUR for sending unsolicited commercial communications by email. The conduct violated the recipient's request to opt out of advertising. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 23 Jan 2024 | CAJA RURAL DE BURGOS, FUENTEPELAYO, SEGOVIA Y CASTELLDANS, S.C.C.CAJABURGOS was fined by the AEPD for failing to ensure the confidentiality and integrity of personal data. The breach resulted in unauthorized access following a data security incident. | ES | AEPD | GDPR | €15,000 | ↗ |
| 16 Sept 2010 | VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined by the AEPD 30,001 EUR for sending advertising messages to a customer who had previously opted out. The authority found this breached Article 21 of the LSSI on marketing communications without the recipient’s consent. | ES | AEPD | ePrivacy | €30,001 | ↗ |
| 27 Jul 2023 | B.B.B.B.B.B. was fined EUR 800 by the AEPD for installing a surveillance system that captured images and sounds from a neighbor’s property and potentially the public street. The authority found breaches of GDPR Articles 13 and 6(1), citing the lack of a valid legal basis and proper notice to affected individuals. | ES | AEPD | GDPR | €800 | ↗ |
| 05 Apr 2022 | B.B.B.B.B.B. was fined 300 EUR for installing a surveillance camera that recorded public areas and private property. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €300 | ↗ |
| 01 Jan 2015 | CENTROS COMERCIALES CARREFOUR S.A.CENTROS COMERCIALES CARREFOUR S.A. was fined by the AEPD in the amount of EUR 3,300. The authority found that the company sent unsolicited advertising emails and failed to properly handle unsubscribe requests, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €3,300 | ↗ |
| 21 Mar 2014 | GRUPOPSCOM SCPGRUPOPSCOM SCP was fined EUR 6,000 by the AEPD. The sanction concerned sending unsolicited commercial emails without recipient consent, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €6,000 | ↗ |
| 16 Jun 2021 | MARBELLA RESORTS, S.L.MARBELLA RESORTS, S.L. was fined EUR 7,000 by the AEPD for non-compliance with data protection rules. The breaches concerned the handling of personal data and the website cookie policy. | ES | AEPD | ePrivacy | €7,000 | ↗ |
| 17 Sept 2018 | TELEFONICA MOVILES ESPAÑA, S.A.U.TELEFONICA MOVILES ESPAÑA, S.A.U. was fined by the AEPD EUR 900 for sending unsolicited advertising emails to an individual who was not a customer. The case concerns a breach of data protection rules governing direct marketing communications. | ES | AEPD | ePrivacy | €900 | ↗ |
| 14 Sept 2023 | AUTOCINES 2015, S.L.AUTOCINES 2015, S.L. was fined by the AEPD 5,000 EUR for posting a child’s photo on social media without parental consent. The authority found a breach of Article 6(1) GDPR. | ES | AEPD | GDPR | €5,000 | ↗ |
| 02 Jul 2010 | DATACYL SERVICIOS INFORMÁTICOS, S.L.DATACYL SERVICIOS INFORMÁTICOS, S.L. was fined 600 EUR by the AEPD. The case concerned sending unsolicited commercial emails without recipient consent, in breach of Article 21 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 19 May 2023 | MADRID TOURISTIC CAPITAL, S.L.MADRID TOURISTIC CAPITAL, S.L. was fined by the AEPD €1,200 for failing to provide proper signage and information about its video surveillance system. The case concerns a breach of data protection transparency and notice requirements. | ES | AEPD | GDPR | €1,200 | ↗ |
| 16 Nov 2023 | BEGIN RESTAURANTES, S.L.BEGIN RESTAURANTES, S.L. was fined by the AEPD EUR 2,000 for deficiencies in its cookie policy. The authority found the use of non-essential third-party cookies without proper consent and insufficient information in the main page banner. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 01 Jan 2014 | Don D.D.D.Don D.D.D. was fined by the AEPD in the amount of 1,400 EUR for sending unsolicited commercial emails. The conduct breached the LSSI rules on marketing communications. | ES | AEPD | ePrivacy | €1,400 | ↗ |
| 14 Mar 2022 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD in the amount of 70,000 EUR for issuing a bill despite confirming that no debt existed and that personal data had been deleted. The authority found this conduct to be contrary to Article 6(1) of the GDPR. | ES | AEPD | GDPR | €70,000 | ↗ |
| 24 Jan 2024 | CAIXA RURAL D'ALGEMESÍ, S.C.V.CCAIXA RURAL D'ALGEMESÍ, S.C.V.C. was fined by the AEPD 15,000 EUR for breaching data protection principles, including confidentiality and integrity. The breach led to unauthorized access to personal data. | ES | AEPD | GDPR | €15,000 | ↗ |