▲ Enforcement Tracker
3,806 GDPR enforcement decisions from 65 countries, updated daily. Compare fines by country or authority →
Total fines · last 12 months
€2.5B
+124% vs previous year
Decisions · last 12 months
623
52 per month avg
Monthly fine totals · last 12 months
NovDecJanFebMarAprMayJunJulAugSepOct
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-03-28 | SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 7Art. 28 | €21,600 |
| 2025-03-28 | SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 7Art. 28 | €21,600 |
| 2025-03-28 | GRUAS IGNACI, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 13Art. 32 | €6,600 |
| 2025-03-28 | GRUAS IGNACI, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 13Art. 32 | €6,600 |
| 2025-03-24 | INDEPENDENTS DE VALLROMANES Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €2,000 |
| 2025-03-20 | GALENICUM HEALTH, S.L.U. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €500 |
| 2025-03-14 | CENTROS COMERCIALES CARREFOUR, S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32Art. 34 | €3,200,000 |
| 2025-02-25 | IBERMUTUA, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL NUM.274. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €600,000 |
| 2025-02-14 | ORANGE BANK, S.A. SUCURSAL EN ESPAÑA Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €200,000 |
| 2025-02-11 | BEEDIGITAL AI, S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €120,000 |
| 2025-01-17 | CAJA RURAL DE SALAMANCA, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €200,000 |
| 2025-01-17 | CAJA RURAL DE EXTREMADURA S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €88,000 |
| 2025-01-17 | CAJA RURAL DE ALBACETE, CIUDAD REAL Y CUENCA, S.C.T Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €80,000 |
| 2025-01-17 | CAJA RURAL DE GIJÓN, S.C.A.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €76,000 |
| 2025-01-17 | CAJA RURAL DEL SUR, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €16,000 |
| 2025-01-17 | CAJA RURAL DE ASTURIAS,
S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2025-01-17 | CAJA RURAL DE ONDA, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2025-01-17 | CAJA RURAL GRANADA, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2025-01-17 | CAJA RURAL DE ARAGÓN, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2025-01-17 | CAJA RURAL DE ARAGÓN, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €12,000 |
| 2025-01-17 | CAJA RURAL NTRA. SRA. DEL
ROSARIO Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €10,000 |
| 2025-01-17 | CAJA RURAL NTRA
MADRE DEL SOL S.C.A.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €8,000 |
| 2025-01-17 | CAJA RURAL NTRA. SRA. DEL ROSARIO Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €8,000 |
| 2025-01-17 | CAJA RURAL DE
BAENA NTRA. SRA. DE GUADALUPE, S.C.C.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €8,000 |
| 2025-01-16 | CAJA RURAL DE JAEN, BARCELONA Y MADRID, S.C.C. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €400,000 |