Skip to content

▲ Enforcement Tracker

3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →

Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
633
53 per month avg
Largest · last 90 days
€825.0M
Uber Technologies Inc. · The Netherlands
Most active authority
116 decisions · Italy

Monthly fine totals · last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
reset
Date ↓ Company / party Authority Articles Fine
2026-10-06 AEPD (Spain) - ps-00287-2025 🇪🇸 Agencia Española de Protección de Datos Art. 5 —
2026-09-23 AEPD sanctions Vodafone España for inadequate Super WiFi processor agreement and oversight 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 28Art. 32 €750,000
2026-09-16 AEPD fines DIGI Telecom for issuing duplicate SIM to impersonator without consent 🇪🇸 AEPD (Spain) Art. 52Art. 5Art. 61Art. 6 €140,000
2026-09-16 AEPD fines El Español for publishing video of minor assailant without anonymization 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 52Art. 25 €20,000
2026-09-16 AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber 🇪🇸 AEPD (Spain) Art. 411Art. 4Art. 52Art. 5 €10,000
2026-09-15 APDCAT: Public body violated GDPR by disclosing audio recording to four extra recipients 🇪🇸 APDCAT (Catalonia) Art. 51Art. 5Art. 6Art. 12 €3,150
2026-09-15 AEPD: Data subject entitled to identity of professionals who accessed medical records 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 52Art. 12 —
2026-09-08 AEPD (Spain) - ps-0035-2025 🇪🇸 AEPD (Spain) Art. 51Art. 5 €160
2026-09-02 AEPD: Canals City Council breached Art. 5(1)(f) GDPR by discarding exam papers unshredded 🇪🇸 AEPD (Spain) Art. 51Art. 5 —
2026-07-17 AEPD (Spain) - EXP202103746 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 12Art. 15 —
2026-07-17 APDCAT sanctions Madremanya City Council for inadequate redaction of sensitive data in 🇪🇸 APDCAT (Catalonia) Art. 51Art. 5Art. 51Art. 31 —
2026-07-16 AEPD (Spain) - PS-00020-2025 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 35Art. 582 €200,000
2026-07-16 AEPD (Spain) - EXP202102529 🇪🇸 AEPD (Spain) Art. 415Art. 4Art. 51Art. 5 —
2026-04-28 Posada del León de Oro
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €240
2026-04-22 KONECTA BTO, S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €300,000
2026-04-15 CAIXABANK, S.A.
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 25 €400,000
2026-03-20 ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €150,000
2026-03-11 IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €650,000
2026-03-10 CUMACA MOTOR, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €6,000
2026-03-04 ARES CAPITAL, S.A.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13 €200,000
2026-03-02 ORNITOLÓGICA DE ANDALUCÍA FOA
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €900
2026-03-01 HOLY MARY CATHOLIC SCHOOL, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 35 €12,000
2026-03-01 Spain DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €1,000
2026-02-11 AEPD (Spain) - EXP202306354 (PS/00312/2024) 🇪🇸 AEPD (Spain) Art. 51Art. 5Art. 61Art. 6 €150,000
2026-01-19 Dental Clinic
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,200