# Private individual: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-12-20
- Original: https://www.enforcementtracker.com/ETid-1534
- Canonical: https://overview.legal/posts/47649
- Topics: Personal Data, IP Address, Controllers, Consent, Processing Agreement, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine of EUR 1,000 on a private individual. A person had filed a complaint with the DPA because the controller had published their personal data such as name, surname, ID card number and date of birth without their consent in a WhatsApp group with 31 members. The DPA considered this to be a violation of the principle of data minimization.

## Full text

The Spanish DPA has imposed a fine of EUR 1,000 on a private individual. A person had filed a complaint with the DPA because the controller had published their personal data such as name, surname, ID card number and date of birth without their consent in a WhatsApp group with 31 members. The DPA considered this to be a violation of the principle of data minimization.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/47649 · 2026-08-22