Skip to content

🇪🇺 SPAIN

1,150 decisions · €155.2M total fines · Spanish Data Protection Authority (aepd)

Date ↓ Company / party Authority Articles Fine
2020-07-20 Comercial Vigobrandy, SL
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 12Art. 13Art. 14 €1,500
2020-07-10 Xfera Moviles S.A.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 32 €55,000
2020-07-10 Vodafone España, SAU
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €12,000
2020-07-10 Global Business Travel Spain SLU
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €5,000
2020-07-10 School Fitness Holiday & Franchising S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €5,000
2020-07-10 Auto Desguaces Iglesias S.L.
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,500
2020-07-10 Centro Internacional De Crecimiento Laboral Y Profesional S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €1,000
2020-07-02 Iberdrola Clientes
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €24,000
2020-07-02 Xfera Moviles S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Spanish Data Protection Authority (aepd) Art. 31Art. 58 €5,000
2020-07-02 De Vere Spain S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 21 €4,000
2020-07-02 Saunier-Tec Mantenimientos de Calor y Frio, SL.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 33 €3,600
2020-06-23 Miraclia (telecommunications company)
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €7,500
2020-06-22 Comunidad de propietarios demelza beach
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000
2020-06-19 National Police Brigade
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €6,000
2020-06-16 Café Bar
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6Art. 13Art. 14 €2,000
2020-06-15 Xfera Moviles S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €75,000
2020-06-09 Equifax Iberica, S.L.
Insufficient fulfilment of data subjects rights
🇪🇺 Spanish Data Protection Authority (aepd) Art. 15 €75,000
2020-06-09 TELEFONICA MOVILES ESPAÑA, S.A.U.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 6 €40,000
2020-06-09 Xfera Moviles S.A.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €39,000
2020-06-09 Glovoapp23
Insufficient involvement of data protection officer
🇪🇺 Spanish Data Protection Authority (aepd) Art. 37 €25,000
2020-06-09 Consulting de Seguridad e Investigacion Mira Dp Madrid S.L.
Insufficient legal basis for data processing
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5Art. 6 €5,000
2020-06-09 Salad Market S.L. (Catering Company)
Insufficient fulfilment of information obligations
🇪🇺 Spanish Data Protection Authority (aepd) Art. 13Art. 14 €3,000
2020-06-09 Property Owner
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €2,000
2020-06-09 Attorney
Insufficient technical and organisational measures to ensure information security
🇪🇺 Spanish Data Protection Authority (aepd) Art. 32 €2,000
2020-06-09 Property Owner
Non-compliance with general data processing principles
🇪🇺 Spanish Data Protection Authority (aepd) Art. 5 €1,000