Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Private Individual: Insufficient legal basis for data processing
How it connects
Related across sources
Case Law Rb. Den Haag - C/09/689833 Case Law VG München - M 26a K 25.5210 News CNIL (France) - SAN-2025-014 News CNIL (France) - SAN-2025-015 News VDAI (Litouwen) - Besluit nr. 3R-1700. Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH
Full text
The Spanish DPA (AEPD) imposed a fine of EUR 2,000 on a private individual. The controller had published the phone number of the data subject to a picture of another person on a dating website in order to create a fake profile with the name 'Katy'. This was only possible due to the fact that no proof of identity was required to create a profile on the portal.
Industry: Individuals and Private Associations
Original document at the source www.aepd.es