# KFC RESTAURANTS SPAIN, S.L.: Insufficient involvement of data protection officer

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-04-20
- Original: https://www.enforcementtracker.com/ETid-1785
- Canonical: https://overview.legal/posts/47900
- Topics: Controllers, Supervisory Authorities, Processing Agreement, Law Enforcement, Data Controller

## Summary

The Spanish DPA has fined KFC RESTAURANTS SPAIN, S.L EUR 25,000. During its investigation, the DPA found that the controller had failed to appoint a data protection officer. In addition, the DPA found that the controller did not provide all of the information required under Art. 13 GDPR on its website.

## Full text

The Spanish DPA has fined KFC RESTAURANTS SPAIN, S.L EUR 25,000. During its investigation, the DPA found that the controller had failed to appoint a data protection officer. In addition, the DPA found that the controller did not provide all of the information required under Art. 13 GDPR on its website.

GDPR Articles: Art. 13 GDPR, Art. 37 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47900 · 2026-08-22