GDPR Fines in Spain
7 data protection authorities · Since 2014
Total Actions
1,294
Total Fines
€224.1M
Average Fine
€184K
Among actions with fines
Enforcement Trend
Decreasing
About Data Protection Enforcement in Spain
Spain is a major enforcement jurisdiction for GDPR and ePrivacy violations, with 7 data protection authorities overseeing compliance since 2014. To date, Spain's regulators have taken 1294 enforcement actions totaling €224,054,392 in fines. The landmark case was a €18,000,000 fine against Amadeus IT Group, S.A. in 2026, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has moderated in recent years, potentially indicating improved compliance across the market or a shift in regulatory priorities. The most frequently enforced violations are cookies placed before consent (28 cases), unclear cookie information (17 cases), third-party cookies without consent (16 cases), reflecting the regulatory focus areas in this jurisdiction.
Data Protection Authorities
Largest Fines in Spain
All Spain actionsRecent Enforcement Actions in Spain
Enforcement Actions by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2014 | 1 | €0 |
| 2019 | 46 | €1.3M |
| 2020 | 168 | €8.8M |
| 2021 | 226 | €27.8M |
| 2022 | 226 | €21.1M |
| 2023 | 255 | €32.8M |
| 2024 | 158 | €43.9M |
| 2025 | 178 | €67.4M |
| 2026 | 36 | €21.0M |
Most Common Violations in Spain
Frequently Asked Questions
How many GDPR and ePrivacy enforcement actions has Spain issued?
Spain has issued 1294 enforcement actions related to GDPR and ePrivacy, totaling €224.1M in fines.
What is the largest GDPR and ePrivacy fine in Spain?
The largest recorded penalty was a €18.0M fine against Amadeus IT Group, S.A. on 2026-04-07.
How many data protection authorities operate in Spain?
Spain has 7 data protection authorities overseeing GDPR and ePrivacy enforcement.
Is GDPR and ePrivacy enforcement decreasing in Spain?
GDPR and ePrivacy enforcement in Spain has been decreasing in recent years.