Skip to content
Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

National Police Brigade: Insufficient legal basis for data processing

Making copies of a company's business records in the context of investigations which contained data from third parties and for which there was no legal basis for processing.

€6,000 Fine
National Police Brigade
SPAIN
Art. 5 GDPR Art. 6 GDPR

Full text

Making copies of a company's business records in the context of investigations which contained data from third parties and for which there was no legal basis for processing.

Industry: Public Sector and Education

How it connects

T-70/23 Data Protection Commission v European Data Protection Board The Irish Data Protection Commission (DPC) challenged provisions of EDPB Binding Decisions 3/2022, 4/2022, and 5/2022, arguing the EDPB exceeded its competence under Article… General Court ·Tenth Chamber, Extended Composition Jan 29, 2025 Supervision Supervisory Authorities Monitoring
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). ·CJEU Jan 9, 2025 IP Address Retention Period Identification
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision