BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 02 Sept 2010 | ENDESA ENERGIA, S.A.ENDESA ENERGIA, S.A. was fined by the AEPD for sending unsolicited commercial emails despite the recipient’s request to stop receiving such messages. The conduct breached Article 21.1 of the LSSI on marketing communications without consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 28 Sept 2010 | WORKING MARESME S.L.WORKING MARESME S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which prohibits marketing communications without prior consent. | ES | AEPD | ePrivacy | €600 | ↗ |
| 10 Jul 2023 | B.B.B.The AEPD imposed a 300 EUR fine on B.B.B. after a surveillance camera was directed toward the complainant's property. The authority found a breach of data protection rules due to unauthorized processing of image data. | ES | AEPD | GDPR | €300 | ↗ |
| 09 Jan 2022 | DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 70,000 EUR for issuing a duplicate SIM card without proper authorization. The incident enabled unauthorized access to a customer's bank account. | ES | AEPD | GDPR | €70,000 | ↗ |
| 02 Feb 2023 | TRACTAMENT D'AIGUES TEIA, S.L.TRACTAMENT D'AIGUES TEIA, S.L. was fined by the AEPD EUR 1,000 for failing to comply with a data subject's request to delete personal data. The case indicates non-compliance with GDPR obligations regarding the exercise of individual rights. | ES | AEPD | GDPR | €1,000 | ↗ |
| 28 Feb 2023 | PELAYO MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJAPelayo Mutua de Seguros y Reaseguros A Prima Fija was fined 70,000 EUR by the AEPD. The authority found that the company disclosed personal data to a third party without consent, breaching GDPR confidentiality and security obligations. | ES | AEPD | GDPR | €70,000 | ↗ |
| 26 Jun 2023 | B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for uploading sexual and personal content of an ex-partner to YouTube and ForoCoches without consent. The authority found this to be a breach of data protection rules. | ES | AEPD | GDPR | €10,000 | ↗ |
| 15 Mar 2022 | JUNTA ADMINISTRADORA A.A.A.The entity was fined for displaying complainants’ personal data on a public notice board. This breached data protection rules and created a risk of unauthorized disclosure of personal information. | ES | AEPD | GDPR | €2,000 | ↗ |
| 01 Jan 2020 | GROW BEATS SL.GROW BEATS SL. was fined 3,000 EUR by the AEPD for failing to provide required privacy policy information and for improper use of cookies without user consent. The case concerned website practices and indicates deficiencies in notice and consent requirements. | ES | AEPD | ePrivacy | €3,000 | ↗ |
| 22 Feb 2022 | RAMONA FILMS, S.L.RAMONA FILMS, S.L. was fined 10,000 EUR by the AEPD. The authority found processing of personal data of minors under 14 without proper consent and non-compliance with website cookie policy requirements. | ES | AEPD | ePrivacy | €10,000 | ↗ |
| 06 Feb 2023 | ROMBOC COMUNICACIONESROMBOC COMUNICACIONES was fined by the AEPD in the amount of 2,000 EUR for making misleading advertising calls without explicit consent from recipients. The case indicates a breach of data protection and direct marketing rules. | ES | AEPD | GDPR | €2,000 | ↗ |
| 30 Jun 2014 | ATRAPALO, S.L.ATRAPALO, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails to a user who had previously requested to unsubscribe. The authority found a breach of Article 21.1 of the LSSI. | ES | AEPD | ePrivacy | €600 | ↗ |
| 07 May 2021 | B.B.B.The entity was fined for improperly directing surveillance cameras toward public transit areas and the complainant's home entrance. This conduct breached data protection rules. | ES | AEPD | GDPR | €1,500 | ↗ |
| 10 May 2021 | VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD for processing personal data without proper consent, in breach of Article 6(1) GDPR. The penalty was set at EUR 70,000, with reductions available for early payment and acknowledgment of responsibility. | ES | AEPD | GDPR | €70,000 | ↗ |
| 05 Aug 2020 | BANKIA, S.A.BANKIA, S.A. was fined by the AEPD 50,000 EUR for retaining a former client’s personal data for more than 16 years without a valid basis. The authority found this to be a breach of data protection principles, especially storage limitation. | ES | AEPD | GDPR | €50,000 | ↗ |
| 25 Sept 2020 | THE WASHPOINT S.L.THE WASHPOINT S.L. was fined by the AEPD 2,000 EUR for lacking a privacy policy and for having an improper cookie policy on its website. The breach concerned Article 13 of the GDPR and Article 22.2 of the LSSI. | ES | AEPD | ePrivacy | €2,000 | ↗ |
| 21 Oct 2022 | CASAL DE L'ESPLUGA DE FRANCOLÍCASAL DE L'ESPLUGA DE FRANCOLÍ was fined by the AEPD for publishing a video on social media without consent. The recording showed a minor during a sports event, which constituted a breach of data protection rules. | ES | AEPD | GDPR | €5,000 | ↗ |
| 05 Mar 2012 | GRANDES ALMACENES FNAC ESPAÑA S.A.The AEPD fined GRANDES ALMACENES FNAC ESPAÑA S.A. 36,000 EUR for sending unsolicited marketing emails to a customer who had opted out. The conduct breached the LSSI rules on electronic communications and recipient consent. | ES | AEPD | ePrivacy | €36,000 | ↗ |
| 01 Jan 2015 | CABLEUROPA SAUCABLEUROPA SAU was fined EUR 5,000 by the AEPD for sending unsolicited commercial emails and SMS messages to a customer. The recipient had previously exercised the right to cancel and opted out of receiving such communications. | ES | AEPD | ePrivacy | €5,000 | ↗ |
| 01 Jan 2014 | HOSPITAL VETERINARIO LA MORALEJA, S.L.HOSPITAL VETERINARIO LA MORALEJA, S.L. was fined by the AEPD 5,000 EUR for sending unsolicited commercial communications by electronic means. The authority found that recipients were not given an option to object to receiving such messages. | ES | AEPD | ePrivacy | €5,000 | ↗ |