Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Comisión Nacional de los Mercados y la Competencia (CNMC) €413.2m 73 % · 1 case
- Ministerio de Derechos Sociales, Consumo y Agenda 2030 €148m 26 % · 3 cases
- Agencia Española de Protección de Datos (AEPD) €1.64m 0 % · 5 cases
- Comisión Nacional del Mercado de Valores (CNMV) €190,000 0 % · 1 case
What for?
by area of lawAll areas of law
Who?
by sectorAll sectors
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 1 | €413.2m |
| Q4 2024 | 2 | €147m |
| Q1 2025 | 0 | — |
| Q2 2025 | 3 | €1.12m |
| Q3 2025 | 0 | — |
| Q4 2025 | 2 | €517,600 |
| Q1 2026 | 0 | — |
| Q2 2026 | 1 | €190,000 |
| Q3 2026 | 1 | €1m |
10 cases
30 Jul 2024 Booking.comSpain: 413 million EUR against Booking.com for abuse vis-à-vis hotels €413.2m
Booking.com, with a market share of 70–90 % in online hotel booking in Spain, imposed unfair conditions such as price parity clauses and obstructed other online travel agencies through ranking criteria (Expediente S/0005/21). The CNMC imposed a fine of 413.24 million EUR.
Parity clauses and ranking advantages for exclusive partners are high-risk for dominant platforms.
- Authority / court
- Comisión Nacional de los Mercados y la Competencia (CNMC)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Art. 2 LDC, Art. 102 AEUV
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Employees
- 10,000 or more
- Published
- 30 Jul 2024
- La CNMC multa a Booking.com con 413,24 millones de euros (S/0005/21) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Jul 2026 AvisAvis: maximum fine of 1 million EUR for handling fee on traffic fines €1m
The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.
No additional fee may be charged for fulfilling statutory obligations – least of all after a court has prohibited the clause.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Repeat case
- yes
- Published
- 29 Jul 2026
- Consumo sanciona con un millón de euros a la empresa de alquiler de coches Avis por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 May 2026 Soltec Power Holdings, SASoltec: incorrect 2023 annual figures reported to the market €190,000
The manufacturer of solar tracking systems disseminated its results for 2023 by way of an "Otra Información Relevante" announcement containing inaccurate information. Spain's National Securities Market Commission (CNMV) imposed a fine of 190,000 EUR for a serious infringement; the company waived administrative appeals.
Voluntary market announcements on results are also subject to MAR – figures must be reconciled before publication.
- Authority / court
- Comisión Nacional del Mercado de Valores (CNMV)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Art. 297.1.e i. V. m. 297.2.d Ley 6/2023; Art. 17 i. V. m. Art. 7 MAR
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Published
- 3 Aug 2026
- Resolución de 17 de julio de 2026 (BOE-A-2026-16923) – sanción a Soltec Power Holdings, SA Official register or notice
- CNMV – Registro público de sanciones Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Dec 2025 Curenergía Comercializador de Último Recurso, S.A.U.AEPD: 500,000 EUR against energy supplier Curenergía after misdirected message in dual chat €500,000
An employee of the customer service provider was serving two customers in chat at the same time and assigned one customer's e-mail address to the other; as a result, the complainant received the name, debts and billing data of a stranger. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) saw the cause in the process design, which allowed parallel chats, and imposed 500,000 EUR for lack of data protection by design; the request for reconsideration was rejected.
Design service channels so that mix-ups between customers are technically harder – an individual error can be an organisational failure.
Diligence in customer service / misdirected messages
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data processors
- Legal basis
- Art. 25 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- AEPD Resolución PS/00190/2024 (EXP202316394) Decision of an authority
- AEPD Resolución recurso de reposición PS/00190/2024 (Datum der Ausgangsentscheidung 22.12.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Oct 2025 Sport & Spa Gest, S.L.AEPD: 17,600 EUR against sports centre over location tags for swimmers €17,600
The operator of a sports facility rented a Bluetooth system with which swimmers were located in the pool via tags and their training was recorded. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) imposed 8,000 EUR for the processing of special categories of data and – after a 20% reduction for immediate payment – 4,000, 2,400 and 3,200 EUR for lack of a legal basis, insufficient information and a deficient impact assessment (17,600 EUR in total); the request for reconsideration was unsuccessful.
New tracking or sensor technology in customer-facing operations requires a legal basis, information and a genuine impact assessment in advance.
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 13, Art. 35 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Mitigating circumstances
- Partial immediate payment (20% reduction under Art. 85 LPACAP).
- AEPD Resolución PS/00160/2024 (EXP202308414) Decision of an authority
- AEPD Resolución recurso de reposición PS/00160/2024 (Datum der Ausgangsentscheidung 13.10.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Jun 2025 CaixaBank, S.A.AEPD: 200,000 EUR against CaixaBank over continued storage of a non-customer's data €200,000
A person who was not (or no longer) a customer received a letter from CaixaBank about an update to its privacy statement, announcing that she would be contacted about her advertising preferences. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) considered the continued storage of her data to be an infringement of the principle of storage limitation and imposed 200,000 EUR; the bank's request for reconsideration was dismissed as inadmissible.
Before mass mailings, check whether the recipients' data may still be stored at all – former customers should be deleted, not written to.
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5 Abs. 1 lit. e DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Employees
- 10,000 or more
- AEPD Resolución PS/00140/2024 (EXP202302270) Decision of an authority
- AEPD Resolución recurso de reposición PS/00140/2024 (Datum der Ausgangsentscheidung 05.06.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 May 2025 Xfera Móviles, S.A.U.AEPD: 200,000 EUR against Xfera (MásMóvil) over number porting without consent €200,000
A customer's mobile number was ported to MásMóvil without the customer having requested it; the new SIM card was handed over to a third party who did not identify themselves. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) found processing without a legal basis, imposed 200,000 EUR and ordered measures against such incidents; the company's request for reconsideration was unsuccessful.
Issue SIM cards and carry out porting only after robust identity verification – couriers and sales partners must comply with this too.
Identity verification for porting and SIM handover (SIM swapping)
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 6 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- AEPD Resolución PS/00170/2024 (EXP202301365) Decision of an authority
- AEPD Resolución recurso de reposición PS/00170/2024 (Datum der Ausgangsentscheidung 30.05.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 Apr 2025 Iberinform Internacional, S.A.AEPD: 720,000 EUR against business information agency Iberinform for purchased data on entrepreneurs €720,000
Since 2008, Iberinform had obtained data on sole traders through a supply contract with Camerdata and used it to enrich its own files for commercial information services. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) found no legal basis for this and no information of the data subjects, and imposed 360,000 EUR for each (720,000 EUR in total) as well as an order to bring the processing into compliance; the request for reconsideration (recurso de reposición) was rejected.
Companies that purchase personal data from third parties need their own legal basis and must actively inform the data subjects.
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 6 Abs. 1, Art. 14 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- AEPD Resolución PS/00150/2024 (EXP202404645) Decision of an authority
- AEPD Resolución recurso de reposición PS/00150/2024 (Datum der Ausgangsentscheidung 14.04.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Nov 2024 RyanairRyanair: 107.8 million EUR fine for cabin baggage and seat fees in Spain €107.8m
The Spanish Ministry of Consumer Affairs sanctioned Ryanair for charging for hand luggage in the cabin, surcharges for adjacent seats for children and persons requiring assistance, refusal of cash payments at airports, an excessive fee for printing boarding passes and non-transparent price information. At 107,775,777 EUR, Ryanair accounted for the largest share of the total fine of 179 million EUR imposed on five low-cost airlines.
Unavoidable additional charges and surcharges must be included transparently in the final price and must be legally permissible.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Published
- 22 Nov 2024
- Consumo sanciona con 179 millones de euros a cinco aerolíneas low cost por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Nov 2024 VuelingVueling: 39.3 million EUR fine over additional fees and non-transparent prices €39.3m
In the same package of sanctions against low-cost airlines, Vueling received a fine of 39,264,412 EUR, including for fees for cabin baggage, surcharges for seats next to accompanied children and misleading omissions in the presentation of prices on its website. The order concludes the administrative proceedings; an action before the Audiencia Nacional (Spain's National High Court) could be brought within two months.
Price components that almost every customer has to pay must not be added later as optional extras.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 22 Nov 2024
- Consumo sanciona con 179 millones de euros a cinco aerolíneas low cost por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link