▲ Enforcement Tracker
3,807 GDPR enforcement decisions from 66 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
624
52 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2020-08-05 | Restaurant Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 12Art. 13 | €3,000 |
| 2020-08-04 | Vodafone España, SAU Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €60,000 |
| 2020-07-31 | Vodafone España SAU Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €45,000 |
| 2020-07-23 | Telefónica Móviles España, SAU Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €75,000 |
| 2020-07-23 | Telefónica Móviles España, SAU Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €70,000 |
| 2020-07-23 | Telefónica Móviles España, SAU Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €55,000 |
| 2020-07-23 | El Periódico de Catalunya, S.L.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €10,000 |
| 2020-07-20 | Orange Espagne S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €80,000 |
| 2020-07-20 | Xfera Moviles S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €70,000 |
| 2020-07-20 | Banco Bilbao Vizcaya Argentaria, SA Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €24,000 |
| 2020-07-10 | Xfera Moviles S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €55,000 |
| 2020-07-10 | Vodafone España, SAU Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2020-07-10 | School Fitness Holiday & Franchising S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €5,000 |
| 2020-07-10 | Auto Desguaces Iglesias S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500 |
| 2020-07-10 | Centro Internacional De Crecimiento Laboral Y Profesional S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €1,000 |
| 2020-07-02 | Iberdrola Clientes Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €24,000 |
| 2020-06-23 | Miraclia (telecommunications company) Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €7,500 |
| 2020-06-22 | Comunidad de propietarios demelza beach Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 13Art. 14 | €2,000 |
| 2020-06-19 | National Police Brigade Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €6,000 |
| 2020-06-16 | Café Bar Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 13Art. 14 | €2,000 |
| 2020-06-09 | Xfera Moviles S.A. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €39,000 |
| 2020-06-09 | Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €5,000 |
| 2020-06-09 | Property Owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,000 |
| 2020-06-09 | Property Owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,000 |
| 2020-03-19 | Oliveros Ustrell, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €6,000 |