# Private individual: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2021-12-21
- Original: https://www.enforcementtracker.com/ETid-965
- Canonical: https://overview.legal/posts/47080
- Topics: Legitimate Interest, Social Media, Processing, Processing Agreement, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine of EUR 6,000 on a private individual. The person had shared a video on Twitter showing images of a sexual assault by a man on a woman. The purpose of sharing the video was to draw attention to domestic violence against women. The DPA considers the sharing to be unlawful. Even though the person may have had a legitimate interest in sharing the video, the victim's right to privacy prevails.

## Full text

The Spanish DPA has imposed a fine of EUR 6,000 on a private individual. The person had shared a video on Twitter showing images of a sexual assault by a man on a woman. The purpose of sharing the video was to draw attention to domestic violence against women. The DPA considers the sharing to be unlawful. Even though the person may have had a legitimate interest in sharing the video, the victim's right to privacy prevails.

GDPR Articles: Art. 6 (1) GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/47080 · 2026-08-22