# Private individual: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-07-10
- Original: https://www.enforcementtracker.com/ETid-3320
- Canonical: https://overview.legal/posts/599015

## Summary

Art. 6 (1) GDPR, Art. 13 GDPR · Sector: Individuals and Private Associations · Decided 2026-07-10

## Full text

Spanish Data Protection Authority (aepd) fined Private individual €3,200 on 2026-07-10 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 6 (1) GDPR, Art. 13 GDPR
Sector: Individuals and Private Associations
Country: Spain
Source: https://www.aepd.es/documento/ps-00238-2025.pdf

---
Generated by overview.legal · https://overview.legal/posts/599015 · 2026-10-13