Skip to content

🇪🇸 Spain

1,110 decisions · €156.9M total fines · Spanish Data Protection Authority (aepd)

Date ↓ Company / party Authority Articles Fine
2020-07-23 Telefónica Móviles España, SAU
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €75,000
2020-07-23 Telefónica Móviles España, SAU
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €70,000
2020-07-23 Telefónica Móviles España, SAU
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €55,000
2020-07-23 El Periódico de Catalunya, S.L.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €10,000
2020-07-23 Xfera Moviles S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €5,000
2020-07-23 El Real Sporting de Gijón S.A.D.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6Art. 7 €5,000
2020-07-20 Orange Espagne S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €80,000
2020-07-20 Xfera Moviles S.A.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €70,000
2020-07-20 Iberia Lae SA Operadora Unipersonal
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 58 €40,000
2020-07-20 Banco Bilbao Vizcaya Argentaria, SA
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €24,000
2020-07-20 Comercial Vigobrandy, SL
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 12Art. 13Art. 14 €1,500
2020-07-10 Xfera Moviles S.A.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €55,000
2020-07-10 Vodafone España, SAU
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €12,000
2020-07-10 School Fitness Holiday & Franchising S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €5,000
2020-07-10 Global Business Travel Spain SLU
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €5,000
2020-07-10 Auto Desguaces Iglesias S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,500
2020-07-10 Centro Internacional De Crecimiento Laboral Y Profesional S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €1,000
2020-07-02 Iberdrola Clientes
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €24,000
2020-07-02 Xfera Moviles S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 31Art. 58 €5,000
2020-07-02 De Vere Spain S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 21 €4,000
2020-07-02 Saunier-Tec Mantenimientos de Calor y Frio, SL.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 33 €3,600
2020-06-23 Miraclia (telecommunications company)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €7,500
2020-06-22 Comunidad de propietarios demelza beach
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000
2020-06-19 National Police Brigade
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €6,000
2020-06-16 Café Bar
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000