# FORO ASTURIAS: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-11-16
- Original: https://www.enforcementtracker.com/ETid-2121
- Canonical: https://overview.legal/posts/48236
- Topics: Personal Data, Education, IP Address, Controllers, Public Authority, Processing Agreement, Processing, Public Sector, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA has imposed a fine of EUR 20,000 on FORO ASTURIAS. An individual had filed a complaint with the DPA due to the fact that personal data stored by the controller had been disclosed to a media company without authorization and which then published the data in a newspaper.

## Full text

The Spanish DPA has imposed a fine of EUR 20,000 on FORO ASTURIAS. An individual had filed a complaint with the DPA due to the fact that personal data stored by the controller had been disclosed to a media company without authorization and which then published the data in a newspaper.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/48236 · 2026-08-22