Skip to content

🇪🇺 Spanish Data Protection Authority (aepd)

1,170 decisions · €170.9M total fines · SPAIN →

Date ↓ Company / party Authority Articles Fine
2021-05-25 Managing Director of a company
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €900
2021-05-21 Telefónica de España, S.A.U
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €45,000
2021-05-21 Homeowners Association
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 12 €3,000
2021-05-21 Physician
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €3,000
2021-05-14 Allianz Compañia de Seguros y Reaseguros, S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €30,000
2021-05-12 Solram T Y R S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 17 €3,000
2021-05-04 EDP Energía, S.A.U
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 25 €1,500,000
2021-05-04 EDP Comercializadora, S.A.U.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 25 €1,500,000
2021-04-27 Anytime Fitness Iberia S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 17Art. 21 €15,000
2021-04-27 Pagamastarde S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 17Art. 21 €3,000
2021-04-23 Equifax Iberica S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 14 €1,000,000
2021-04-22 HazteOir.Org
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €4,000
2021-04-22 Private Individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,500
2021-04-20 Highcliffe Estates Marbella S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €8,000
2021-04-19 Pub owner
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,500
2021-04-15 Private Individual
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 13 €3,000
2021-04-13 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €90,000
2021-04-08 Kutxabank, S.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 17 €60,000
2021-04-06 Promotech Digital S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 21 €2,400
2021-04-05 Stockhunters S.L.
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13 €4,000
2021-04-05 Electrotecnica Bastida S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €3,000
2021-04-05 Kukimbia S.L.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €3,000
2021-03-23 Laboratorio Octogón, S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,000
2021-03-18 Asesoría Alpi-Clúa S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €3,000
2021-03-16 Vodafone España, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €60,000