EU privacy enforcement roundup

Dec 29 – Jan 4, 2026 · generated automatically from 54 documents ingested by the pipeline

54 fines published
€4.5M total amount
10 authorities active
€3.5M biggest: Company (🇪🇺 French Data Protection Authority (CNIL))

Fines this week

€3,500,000 Company 🇪🇺 French Data Protection Authority (CNIL) · Art. 6, Art. 13, Art. 32, Art. 35 · Dec 30 €232,379 Polish Postal Service 🇪🇺 Polish National Personal Data Protection Office (UODO) · Art. 38 · Jan 2 €80,000 ONE WAY PRIVATE COMPANY 🇪🇺 Hellenic Data Protection Authority (HDPA) · Art. 5, Art. 6, Art. 7, Art. 29 · Dec 31 €60,000 Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL) 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €60,000 Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL) 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €60,000 ENDESA (energy supplyer) 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €60,000 ENDESA (energy supplyer) 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €50,000 Social Insurance Agency 🇪🇺 Slovak Data Protection Office · Art. 32 · Dec 30 €50,000 Social Insurance Agency 🇪🇺 Slovak Data Protection Office · Art. 32 · Dec 30 €40,000 Slovak Telekom 🇪🇺 Slovak Data Protection Office · Art. 32 · Dec 30 €40,000 Slovak Telekom 🇪🇺 Slovak Data Protection Office · Art. 32 · Dec 30 €27,000 Vodafone España, S.A.U. 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €27,000 Vodafone España, S.A.U. 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 5 · Dec 30 €20,000 Telecommunications company 🇪🇺 Croatian Data Protection Authority (azop) · Art. 6, Art. 5 · Dec 30 €20,000 Telecommunications company 🇪🇺 Croatian Data Protection Authority (azop) · Art. 6, Art. 5 · Dec 30 €12,000 Madrileña Red de Gas 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 32 · Dec 30 €12,000 Madrileña Red de Gas 🇪🇺 Spanish Data Protection Authority (aepd) · Art. 32 · Dec 30 €10,000 Thessaloniki–Thessaly Gas Supply Company S.A. 🇪🇺 Hellenic Data Protection Authority (HDPA) · Art. 28, Art. 32 · Dec 31 €10,000 SIGMA & KAPPA IMPORTING SOCIÉTÉ ANONYME 🇪🇺 Hellenic Data Protection Authority (HDPA) · Art. 32 · Dec 31 €10,000 Roumasport S.R.L 🇪🇺 Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) · Art. 32 · Dec 30
+ 34 more in the 2026 dashboard →