Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.4%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
02 Sept 2010ENDESA ENERGIA, S.A.ENDESA ENERGIA, S.A. was fined by the AEPD for sending unsolicited commercial emails despite the recipient’s request to stop receiving such messages. The conduct breached Article 21.1 of the LSSI on marketing communications without consent.ESAEPDePrivacy€600
28 Sept 2010WORKING MARESME S.L.WORKING MARESME S.L. was fined by the AEPD in the amount of EUR 600 for sending unsolicited commercial emails. The conduct breached Article 21 of the LSSI, which prohibits marketing communications without prior consent.ESAEPDePrivacy€600
10 Jul 2023B.B.B.The AEPD imposed a 300 EUR fine on B.B.B. after a surveillance camera was directed toward the complainant's property. The authority found a breach of data protection rules due to unauthorized processing of image data.ESAEPDGDPR€300
09 Jan 2022DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 70,000 EUR for issuing a duplicate SIM card without proper authorization. The incident enabled unauthorized access to a customer's bank account.ESAEPDGDPR€70,000
02 Feb 2023TRACTAMENT D'AIGUES TEIA, S.L.TRACTAMENT D'AIGUES TEIA, S.L. was fined by the AEPD EUR 1,000 for failing to comply with a data subject's request to delete personal data. The case indicates non-compliance with GDPR obligations regarding the exercise of individual rights.ESAEPDGDPR€1,000
28 Feb 2023PELAYO MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJAPelayo Mutua de Seguros y Reaseguros A Prima Fija was fined 70,000 EUR by the AEPD. The authority found that the company disclosed personal data to a third party without consent, breaching GDPR confidentiality and security obligations.ESAEPDGDPR€70,000
26 Jun 2023B.B.B.B.B.B. was fined by the AEPD 10,000 EUR for uploading sexual and personal content of an ex-partner to YouTube and ForoCoches without consent. The authority found this to be a breach of data protection rules.ESAEPDGDPR€10,000
15 Mar 2022JUNTA ADMINISTRADORA A.A.A.The entity was fined for displaying complainants’ personal data on a public notice board. This breached data protection rules and created a risk of unauthorized disclosure of personal information.ESAEPDGDPR€2,000
01 Jan 2020GROW BEATS SL.GROW BEATS SL. was fined 3,000 EUR by the AEPD for failing to provide required privacy policy information and for improper use of cookies without user consent. The case concerned website practices and indicates deficiencies in notice and consent requirements.ESAEPDePrivacy€3,000
22 Feb 2022RAMONA FILMS, S.L.RAMONA FILMS, S.L. was fined 10,000 EUR by the AEPD. The authority found processing of personal data of minors under 14 without proper consent and non-compliance with website cookie policy requirements.ESAEPDePrivacy€10,000
06 Feb 2023ROMBOC COMUNICACIONESROMBOC COMUNICACIONES was fined by the AEPD in the amount of 2,000 EUR for making misleading advertising calls without explicit consent from recipients. The case indicates a breach of data protection and direct marketing rules.ESAEPDGDPR€2,000
30 Jun 2014ATRAPALO, S.L.ATRAPALO, S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial emails to a user who had previously requested to unsubscribe. The authority found a breach of Article 21.1 of the LSSI.ESAEPDePrivacy€600
07 May 2021B.B.B.The entity was fined for improperly directing surveillance cameras toward public transit areas and the complainant's home entrance. This conduct breached data protection rules.ESAEPDGDPR€1,500
10 May 2021VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined by the AEPD for processing personal data without proper consent, in breach of Article 6(1) GDPR. The penalty was set at EUR 70,000, with reductions available for early payment and acknowledgment of responsibility.ESAEPDGDPR€70,000
05 Aug 2020BANKIA, S.A.BANKIA, S.A. was fined by the AEPD 50,000 EUR for retaining a former client’s personal data for more than 16 years without a valid basis. The authority found this to be a breach of data protection principles, especially storage limitation.ESAEPDGDPR€50,000
25 Sept 2020THE WASHPOINT S.L.THE WASHPOINT S.L. was fined by the AEPD 2,000 EUR for lacking a privacy policy and for having an improper cookie policy on its website. The breach concerned Article 13 of the GDPR and Article 22.2 of the LSSI.ESAEPDePrivacy€2,000
21 Oct 2022CASAL DE L'ESPLUGA DE FRANCOLÍCASAL DE L'ESPLUGA DE FRANCOLÍ was fined by the AEPD for publishing a video on social media without consent. The recording showed a minor during a sports event, which constituted a breach of data protection rules.ESAEPDGDPR€5,000
05 Mar 2012GRANDES ALMACENES FNAC ESPAÑA S.A.The AEPD fined GRANDES ALMACENES FNAC ESPAÑA S.A. 36,000 EUR for sending unsolicited marketing emails to a customer who had opted out. The conduct breached the LSSI rules on electronic communications and recipient consent.ESAEPDePrivacy€36,000
01 Jan 2015CABLEUROPA SAUCABLEUROPA SAU was fined EUR 5,000 by the AEPD for sending unsolicited commercial emails and SMS messages to a customer. The recipient had previously exercised the right to cancel and opted out of receiving such communications.ESAEPDePrivacy€5,000
01 Jan 2014HOSPITAL VETERINARIO LA MORALEJA, S.L.HOSPITAL VETERINARIO LA MORALEJA, S.L. was fined by the AEPD 5,000 EUR for sending unsolicited commercial communications by electronic means. The authority found that recipients were not given an option to object to receiving such messages.ESAEPDePrivacy€5,000