Skip to content

🇪🇸 Spanish Data Protection Authority (aepd)

1,170 decisions · €170.9M total fines · Spain →

Date ↓ Company / party Authority Articles Fine
2026-04-28 GATIGOS, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €6,000
2026-04-28 SIPHONE 2020, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €4,000
2026-04-28 RESIDENCIAL ETXE-LAN, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €1,800
2026-04-28 Posada del León de Oro
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €240
2026-04-22 KONECTA BTO, S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €300,000
2026-03-13 RAMÓN GRAU, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 6Art. 13 €18,000
2026-03-13 CENTRO MEDICO REY FERNANDO, S.L.P.
Insufficient fulfilment of data subjects rights
🇪🇸 Spanish Data Protection Authority (aepd) Art. 12 €600
2026-03-13 SERVICIOS INMOBILIARIOS Y GESTIÓN RCL MADRID, S.L.
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €600
2026-03-13 Housing Association
Insufficient cooperation with supervisory authority
🇪🇸 Spanish Data Protection Authority (aepd) Art. 58 €450
2026-03-11 IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA
Insufficient technical and organisational measures to ensure information security
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €650,000
2026-03-10 CUMACA MOTOR, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €6,000
2026-03-04 ARES CAPITAL, S.A.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13 €200,000
2026-03-02 HIGHCLIFFE ESTATES MARBELLA, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 6 €8,500
2026-03-02 MALAGASUITE SHOWROOM, S.L.
Insufficient fulfilment of data subjects rights
🇪🇸 Spanish Data Protection Authority (aepd) Art. 13 €2,000
2026-03-02 ORNITOLÓGICA DE ANDALUCÍA FOA
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €900
2026-03-01 HOLY MARY CATHOLIC SCHOOL, S.L.
Insufficient legal basis for data processing
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 35 €12,000
2026-03-01 Spain DPA: Non-compliance with general data processing principles
Non-compliance with general data processing principles
🇪🇸 Spanish Data Protection Authority (aepd) Art. 5 €1,000
2026-02-06 Landlord
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €1,800
2026-02-03 FREE TECHNOLOGIES EXCOM, S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €10,000
2026-01-19 Dental Clinic
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,200
2026-01-10 KVIKU SPAIN, S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €8,000
2026-01-10 VOX ESPAÑA
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €500
2025-12-30 Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €60,000
2025-12-30 Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €60,000
2025-12-30 ENDESA (energy supplyer)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €60,000