▲ Enforcement Tracker
3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
633
53 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-11-14 | AXARQUIA VELEZ DENTAL, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,400 |
| 2025-11-14 | AXARQUIA VELEZ DENTAL, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,400 |
| 2025-10-28 | APARELLS ORTOPEDICS CURTO, S.L Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €6,000 |
| 2025-10-28 | APARELLS ORTOPEDICS CURTO, S.L Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €6,000 |
| 2025-10-10 | AEPD (Spain) - PS-00140-2025 | 🇪🇸 AEPD (Spain) | Art. 51Art. 5Art. 9Art. 241 | — |
| 2025-10-04 | SEUR GEOPOST, S.L. Insufficient data processing agreement | 🇪🇸 Spanish Data Protection Authority (aepd) | Art. 5Art. 28 | €164,000 |
| 2025-10-03 | THE RED KIWI, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €30,000 |
| 2025-10-03 | THE RED KIWI, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €30,000 |
| 2025-09-25 | SERVACE S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €840 |
| 2025-09-25 | SERVACE S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6 | €840 |
| 2025-09-17 | SERVICIOS FINANCIEROS CARREFOUR, E.F.C. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500,000 |
| 2025-09-17 | SERVICIOS FINANCIEROS CARREFOUR, E.F.C. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500,000 |
| 2025-09-04 | Sociedad de Gestión de Activos Procedentes de la Reestructuración Bancaria S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 28 | €180,000 |
| 2025-09-04 | Sociedad de Gestión de Activos Procedentes de la Reestructuración Bancaria S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 28 | €180,000 |
| 2025-08-25 | YUNEXPRESS SPAIN, S.L. Insufficient data processing agreement | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 28 | €5,400 |
| 2025-08-25 | YUNEXPRESS SPAIN, S.L. Insufficient data processing agreement | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 28 | €5,400 |
| 2025-08-25 | LEIVA BUS, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,800 |
| 2025-08-25 | LEIVA BUS, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,800 |
| 2025-08-22 | GRUPO BONATEL SL Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €18,000 |
| 2025-08-22 | GRUPO BONATEL SL Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €18,000 |
| 2025-08-22 | BANCO INVERSIS, S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €6,000 |
| 2025-08-22 | BANCO INVERSIS, S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €6,000 |
| 2025-08-14 | WORLD 2 MEET, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €42,000 |
| 2025-08-14 | WORLD 2 MEET, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €42,000 |
| 2025-08-12 | REAL SOCIEDAD DE FUTBOL S.A.D. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €66,000 |