🇪🇸 Spain
1,110 decisions · €156.9M total fines · Spanish Data Protection Authority (aepd)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-04-22 | HazteOir.Org Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €4,000 |
| 2021-04-22 | Private Individual Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500 |
| 2021-04-20 | Highcliffe Estates Marbella S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €8,000 |
| 2021-04-19 | Pub owner Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500 |
| 2021-04-15 | Private Individual Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 13 | €3,000 |
| 2021-04-13 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €90,000 |
| 2021-04-08 | Kutxabank, S.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 17 | €60,000 |
| 2021-04-06 | Promotech Digital S.L. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 21 | €2,400 |
| 2021-04-05 | Stockhunters S.L. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €4,000 |
| 2021-04-05 | Kukimbia S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 32 | €3,000 |
| 2021-04-05 | Electrotecnica Bastida S.L. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 32 | €3,000 |
| 2021-03-23 | Laboratorio Octogón, S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,000 |
| 2021-03-18 | Asesoría Alpi-Clúa S.L. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 32 | €3,000 |
| 2021-03-16 | Vodafone España, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €60,000 |
| 2021-03-15 | Air Europa Lineas Aereas, SA. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 32Art. 33 | €600,000 |
| 2021-03-15 | Certime S.A. Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €5,000 |
| 2021-03-15 | Cultural association Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €3,000 |
| 2021-03-15 | Heredad de Urueña S.A. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 13 | €2,000 |
| 2021-03-12 | NBQ Technology, S.A.U. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €12,000 |
| 2021-03-12 | Private Person Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €1,500 |
| 2021-03-11 | Vodafone España, S.A.U. Insufficient fulfilment of data subjects rights | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 28Art. 24Art. 44Art. 21 | €8,150,000 |
| 2021-03-10 | Xfera Moviles S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5Art. 17Art. 32 | €90,000 |
| 2021-03-10 | Equifax Iberica S.L. Insufficient legal basis for data processing | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6 | €50,000 |
| 2021-03-10 | Hospital Campogrande DE Non-compliance with general data processing principles | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 5 | €10,000 |
| 2021-03-10 | Filigrana Comunicación S.L.U. Insufficient fulfilment of information obligations | 🇪🇺 Spanish Data Protection Authority (aepd) | Art. 6Art. 13Art. 14 | €8,000 |