# Private individual: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-10-27
- Original: https://www.enforcementtracker.com/ETid-3386
- Canonical: https://overview.legal/posts/607196
- Topics: Supervisory Authorities

## Full text

Spanish Data Protection Authority (aepd) fined Private individual €6,000 on 2026-10-27 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 6 (1) GDPR
Sector: Individuals and Private Associations
Country: Spain
Source: https://www.aepd.es/documento/ps-00377-2025.pdf

## Cited law provisions (2)

### GDPR — gdpr-art-6-par-1-en

Processing shall be lawful only if and to the extent that at least one of the following applies:

### GDPR — gdpr-art-6-en

Lawfulness of processing

---
Generated by overview.legal · https://overview.legal/posts/607196 · 2026-11-14