GDPR Fines in Spain
7 data protection authorities · Since 2014
Total Actions
1,294
Total Fines
€189.4M
Average Fine
€155K
Among actions with fines
Enforcement Trend
Decreasing
About Cookie Enforcement in Spain
Spain has a robust data protection landscape with eight Data Protection Authorities (DPAs) that oversee compliance. The main authority, the Agencia Española de Protección de Datos, has taken the lead in enforcing regulations, focusing on cookie-related violations. Common issues include placing cookies before obtaining consent, unclear cookie information, and misleading banner messaging. Although enforcement actions have decreased recently, website operators should be aware of the strict requirements for cookie consent. It's important to ensure that users can easily reject cookies and that all cookie information is clear and accurate.
Data Protection Authorities
Largest Fines in Spain
All Spain actionsRecent Enforcement Actions in Spain
Enforcement Actions by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2014 | 1 | €0 |
| 2019 | 46 | €1.3M |
| 2020 | 170 | €8.9M |
| 2021 | 232 | €28.0M |
| 2022 | 232 | €21.2M |
| 2023 | 275 | €33.0M |
| 2024 | 158 | €43.9M |
| 2025 | 175 | €53.0M |
| 2026 | 5 | €22K |
Most Common Violations in Spain
Frequently Asked Questions
How many cookie enforcement actions has Spain issued?
Spain has issued 1294 enforcement actions related to cookie consent and ePrivacy, totaling €189.4M in fines.
What is the largest cookie fine in Spain?
The largest was a €10.0M fine against Aena, S.M.E., S.A. on 2025-11-06 for cookie consent violations.
How many data protection authorities operate in Spain?
Spain has 7 data protection authorities overseeing GDPR and cookie consent enforcement.
Is cookie enforcement decreasing in Spain?
Cookie consent enforcement in Spain has been decreasing in recent years.