Enforcement
EN Private individual: Insufficient legal basis for data processing
€10,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The controller had uploaded an individual's personal data, including their name, a picture and their telephone number, to advertise a massage service on a website, even though the individual had not given their consent.
GDPR Articles: Art. 6 (1) GDPR
Industry: Individuals and Private Associations