Who was sanctioned, and for what?

The owner of a business in Bizkaia that produces and sells Basque gildas repeatedly employed foreign workers without work permits between December 2018 and May 2021, thereby reducing wage and social security costs. The High Court of Justice of the Basque Country (Tribunal Superior de Justicia del País Vasco, TSJPV) upheld the conviction by the Audiencia de Bizkaia (Bizkaia Provincial Court) for an offence against workers' rights: a fine of 18,000 EUR and 2,500 EUR compensation for each employee bringing a claim; an earlier administrative sanction against the company does not preclude this. The judgment is not yet final (date = publication).

Authority / court

Tribunal Superior de Justicia del País Vasco (TSJPV; Vorinstanz: Audiencia Provincial de Bizkaia)

Area of law

Health and safety and employment law · Minimum wage and undeclared work

Legal basis

Art. 311 bis a) Código Penal (Delitos contra los derechos de los trabajadores)

Action

Fine

Status of proceedings

unknown

Sector

Food and agriculture

Culpability

intentional

Repeat case

yes

Liability of senior managers

Owner personally convicted under criminal law; administrative sanctions had previously been imposed on the company.

Published

21 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.

Authority / court

Ministerio de Derechos Sociales, Consumo y Agenda 2030

Area of law

Consumer protection and online retail · Information duties in online retail

Legal basis

Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)

Action

Fine

Status of proceedings

unknown

Sector

Transport, logistics and shipping

Repeat case

yes

Published

29 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

The manufacturer of solar tracking systems disseminated its results for 2023 by way of an "Otra Información Relevante" announcement containing inaccurate information. Spain's National Securities Market Commission (CNMV) imposed a fine of 190,000 EUR for a serious infringement; the company waived administrative appeals.

Authority / court

Comisión Nacional del Mercado de Valores (CNMV)

Area of law

Capital markets and financial supervision · Disclosure and reporting obligations

Legal basis

Art. 297.1.e i. V. m. 297.2.d Ley 6/2023; Art. 17 i. V. m. Art. 7 MAR

Action

Fine

Status of proceedings

unknown

Sector

Energy and utilities

Published

3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

An employee of the customer service provider was serving two customers in chat at the same time and assigned one customer's e-mail address to the other; as a result, the complainant received the name, debts and billing data of a stranger. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) saw the cause in the process design, which allowed parallel chats, and imposed 500,000 EUR for lack of data protection by design; the request for reconsideration was rejected.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data processors

Legal basis

Art. 25 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Energy and utilities

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

The operator of a sports facility rented a Bluetooth system with which swimmers were located in the pool via tags and their training was recorded. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) imposed 8,000 EUR for the processing of special categories of data and – after a 20% reduction for immediate payment – 4,000, 2,400 and 3,200 EUR for lack of a legal basis, insufficient information and a deficient impact assessment (17,600 EUR in total); the request for reconsideration was unsuccessful.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 13, Art. 35 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Mitigating circumstances

Partial immediate payment (20% reduction under Art. 85 LPACAP).

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

A person who was not (or no longer) a customer received a letter from CaixaBank about an update to its privacy statement, announcing that she would be contacted about her advertising preferences. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) considered the continued storage of her data to be an infringement of the principle of storage limitation and imposed 200,000 EUR; the bank's request for reconsideration was dismissed as inadmissible.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Marketing and consent

Legal basis

Art. 5 Abs. 1 lit. e DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Employees

10,000 or more

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

A customer's mobile number was ported to MásMóvil without the customer having requested it; the new SIM card was handed over to a third party who did not identify themselves. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) found processing without a legal basis, imposed 200,000 EUR and ordered measures against such incidents; the company's request for reconsideration was unsuccessful.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data breaches and data security

Legal basis

Art. 6 Abs. 1 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Telecoms, IT and software

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

Since 2008, Iberinform had obtained data on sole traders through a supply contract with Camerdata and used it to enrich its own files for commercial information services. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) found no legal basis for this and no information of the data subjects, and imposed 360,000 EUR for each (720,000 EUR in total) as well as an order to bring the processing into compliance; the request for reconsideration (recurso de reposición) was rejected.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 6 Abs. 1, Art. 14 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

The Spanish Ministry of Consumer Affairs sanctioned Ryanair for charging for hand luggage in the cabin, surcharges for adjacent seats for children and persons requiring assistance, refusal of cash payments at airports, an excessive fee for printing boarding passes and non-transparent price information. At 107,775,777 EUR, Ryanair accounted for the largest share of the total fine of 179 million EUR imposed on five low-cost airlines.

Authority / court

Ministerio de Derechos Sociales, Consumo y Agenda 2030

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves

Action

Fine

Status of proceedings

unknown

Sector

Transport, logistics and shipping

Employees

10,000 or more

Published

22 Nov 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

In the same package of sanctions against low-cost airlines, Vueling received a fine of 39,264,412 EUR, including for fees for cabin baggage, surcharges for seats next to accompanied children and misleading omissions in the presentation of prices on its website. The order concludes the administrative proceedings; an action before the Audiencia Nacional (Spain's National High Court) could be brought within two months.

Authority / court

Ministerio de Derechos Sociales, Consumo y Agenda 2030

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves

Action

Fine

Status of proceedings

unknown

Sector

Transport, logistics and shipping

Published

22 Nov 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report

Booking.com, with a market share of 70–90 % in online hotel booking in Spain, imposed unfair conditions such as price parity clauses and obstructed other online travel agencies through ranking criteria (Expediente S/0005/21). The CNMC imposed a fine of 413.24 million EUR.

Authority / court

Comisión Nacional de los Mercados y la Competencia (CNMC)

Area of law

Competition law · Abuse of market power

Legal basis

Art. 2 LDC, Art. 102 AEUV

Action

Fine

Status of proceedings

unknown

Sector

Media and online platforms

Employees

10,000 or more

Published

30 Jul 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Website What is wrong? Please include evidence if possible.

Anonymous: we store only your text — no contact details and no IP address.

Send report