# Accommodation provider (name redacted): Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-10-27
- Original: https://www.enforcementtracker.com/ETid-3384
- Canonical: https://overview.legal/posts/607194
- Topics: Retention Period, Supervision, Supervisory Authorities

## Summary

The Spanish Data Protection Authority (AEPD) fined an unnamed accommodation provider €4,000 for violating Article 5(1)(c) of the GDPR, which addresses the principle of data minimization. The enforcement action, initiated on October 27, 2026, centered on the entity's non-compliance with general data processing principles within the accommodation and hospitality sector.

## Full text

Spanish Data Protection Authority (aepd) fined Accommodation provider (name redacted) €4,000 on 2026-10-27 for: Non-compliance with general data processing principles.
GDPR Articles: Art. 5 (1) c) GDPR
Sector: Accommodation and Hospitality
Country: Spain
Source: https://www.aepd.es/documento/ps-00296-2025.pdf

## Cited law provisions (3)

### GDPR — gdpr-art-5-par-1-en

Personal data shall be:

### GDPR — gdpr-art-5-par-1-pnt-c-en

adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);

### GDPR — gdpr-art-5-en

Principles relating to processing of personal data

---
Generated by overview.legal · https://overview.legal/posts/607194 · 2026-11-14