▲ Enforcement Tracker
3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
623
52 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-05-23 | AIRE NETWORKS DEL MEDITERRÃNEO, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €60,000 |
| 2025-05-23 | AIRE NETWORKS DEL MEDITERRÃNEO, S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €60,000 |
| 2025-05-19 | Home Owner Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,000 |
| 2025-05-19 | Home Owner Association Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,000 |
| 2025-05-16 | ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €30,000 |
| 2025-05-16 | ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €30,000 |
| 2025-05-13 | PLATAFORMA CABANILLAS SA. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €100,000 |
| 2025-05-13 | PLATAFORMA CABANILLAS SA. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €100,000 |
| 2025-04-24 | ULPIA TRAJANA ALAMEDA S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 9 | €1,500 |
| 2025-04-24 | ULPIA TRAJANA ALAMEDA S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 9 | €1,500 |
| 2025-04-22 | AEPD: Continuous workplace audio recording violates GDPR data minimisation principle | 🇪🇸 AEPD (Spain) | Art. 51Art. 5 | €4,000 |
| 2025-04-15 | Chamber of Commerce, Industry, Services and Navigation of Spain Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 14 | €500,000 |
| 2025-04-15 | Chamber of Commerce, Industry, Services and Navigation of Spain Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 6Art. 14 | €500,000 |
| 2025-04-15 | SPAIN DPA: Non-compliance with general data processing principles Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-04-15 | SPAIN, DPA: Niet-naleving van de algemene principes voor gegevensverwerking. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-04-14 | EDA TV CONSULTING, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €3,000 |
| 2025-04-14 | EDA TV CONSULTING, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €3,000 |
| 2025-04-09 | FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-04-09 | FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-04-03 | Owner of a Law Firm Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-04-03 | Owner of a Law Firm Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600 |
| 2025-03-30 | MAD COOL FESTIVAL S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €3,500 |
| 2025-03-30 | MAD COOL FESTIVAL S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €3,500 |
| 2025-03-28 | SERVICIOS ESPECIALES, S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €120,000 |
| 2025-03-28 | SERVICIOS ESPECIALES, S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €120,000 |