Content type · 1,205 documents in this view · 3,813 in total
Enforcement
Regulatory actions, fines, warnings, and enforcement decisions
Country: Spain (50) Clear filter
Filter by Topic Supervisory Authorities 3594 Processing 2644 Personal Data 2403 Controllers 2026 Processing Agreement 1114 Security 1018 Supervision 854 Healthcare 622 Law Enforcement 568 Monitoring 553 Public Authority 542 Consent 508
€4,000 Private individual: Non-compliance with general data processing principles The Spanish DPA has fined a private individual EUR 4,000 for installing a video surveillance camera that captured parts of a commonly shared garage. The DPA considered this a… SPAIN ·Art. 5 Oct 9, 2023
€500 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) fined a private individual EUR 500. The individual had installed video surveillance cameras on their property which covered, among other things, the public… SPAIN ·Art. 5 Oct 9, 2023
€500 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 500 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5 Oct 5, 2023
€420 CHINA CENTER LLEIDA: Insufficient fulfilment of information obligations The Spanish DPA has fined CHINA CENTER LLEIDA due to a lack of sufficient data processing information in relation to video surveillance in their premises. The original fine of EUR… SPAIN ·Art. 13 Sep 27, 2023
€70,000 DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 70,000 on DIGI SPAIN TELECOM, S.L.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM… Art. 6 ·Insufficient legal basis for data processing Sep 26, 2023
€30,000 EUROPA PRESS DE CATALUNYA, S.A.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 30,000 on EUROPA PRESS DE CATALUNYA, S.A.. Several media outlets, including the controller had published an audio recording of a multiple… SPAIN ·Art. 5 Sep 26, 2023
€17,000 FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 17,000 on FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA. Athletes were required to upload the vaccination certificate against COVID with… SPAIN ·Art. 9, 13 Sep 25, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Sep 25, 2023
€12,000 CHATWITH.IO WORLDWIDE, S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 12,000 on the website operator CHATWITH.IO WORLDWIDE, S.L. During its investigation, the DPA found that the controller had failed to… SPAIN ·Art. 5, 13, 22 Sep 23, 2023
€4,000 Private individual: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 4,000 on a private individual. An individual had rented a room from the controller and filed a complaint against them due to the fact… SPAIN ·Art. 6 Sep 21, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered neighbour… SPAIN ·Art. 5 Sep 21, 2023
€1,500 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 1,500 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Sep 19, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered… SPAIN ·Art. 5 Sep 19, 2023
€70,000 SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 70,000 on SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.. A customer had filed a complaint with the DPA due to the fact that the controller… SPAIN ·Art. 6 Sep 7, 2023
€80,000 Vodafone España, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM card to an… SPAIN ·Art. 6 Sep 5, 2023
€300 Private individual: Insufficient fulfilment of information obligations The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 13 Sep 1, 2023
€300 Private individual: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 300 on a private individual. The person had installed a surveillance camera in an apartment building without first obtaining permission… SPAIN ·Art. 6 Aug 30, 2023
€180 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the public space. The… SPAIN ·Art. 5 Aug 30, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of 300 euros on a private individual. The controller had installed video surveillance cameras that recorded a neighbor's property, among other… SPAIN ·Art. 5 Aug 30, 2023
€1,500 Private individual: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 1,500 on a private individual. The individual had installed video surveillance cameras in a residential complex, which also covered… SPAIN ·Art. 6, 13 Aug 30, 2023
€140,000 GENERAL LOGISTICS SYSTEMS SPAIN, S.A.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR EUR 140,000 against GENERAL LOGISTICS SYSTEMS SPAIN, S.A.. Two individuals had filed a complaint with the DPA about parcels intended for… Art. 6 ·Insufficient legal basis for data processing Aug 30, 2023
€1,500 ALBEN AIRPORT FACILITIES S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on ALBEN AIRPORT FACILITIES S.L.. The controller had sent an email with certificates of participation in a training course to all participants,… SPAIN ·Art. 5, 32 Aug 29, 2023
€500 MULTIGAS ASESORES S.L.: Insufficient cooperation with supervisory authority The Spanish DPA has fined MULTIGAS ASESORES S.L. EUR 500 for failing to provide information requested by the DPA during an investigation. SPAIN ·Art. 58 Aug 28, 2023
€10,000 Private individual: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The person had published on his Facebook profile a video of another person being clearly drunk without… SPAIN ·Art. 6 Aug 28, 2023
€4,800 WALL BOX CHARGERS S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on WALL BOX CHARGERS S.L.. The controller had inadvertently placed a person on CC on emails to other customers, giving them access to data from… SPAIN ·Art. 5, 32 Aug 28, 2023
€1,500 Homeowners' association: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 1,500 on a homeowners' association. A property owner had filed a complaint with the DPA. The controller had published an enforcement… SPAIN ·Art. 5, 32 Aug 25, 2023
€300 Private individual: Insufficient fulfilment of information obligations The Spanish DPA (AEPD) has fined a private individual EUR 300 for failing to provide sufficient information about a video surveillance system installed at their property. SPAIN ·Art. 13 Aug 23, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5 Aug 23, 2023
€20,000 JOLY DIGITAL, S.L.U.: Insufficient legal basis for data processing The Spanish DPA has fined JOLY DIGITAL, S.L.U. EUR 20,000. A person had filed a complaint with the DPA because the controller had published an image they had posted on their… SPAIN ·Art. 6 Aug 18, 2023
€5,000 Private individual: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 5,000 on a private individual. The controller had installed CCTV at his house in a residential complex which also covered areas of the… SPAIN ·Art. 6 Aug 16, 2023
€300 Private individual: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 300 on a private individual. The controller had installed a video surveillance system in a shared garage without properly informing about… SPAIN ·Art. 13 Aug 16, 2023
€600 MÁRMOLES Y GRANITOS MEJIAS, S. L.: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on MÁRMOLES Y GRANITOS MEJIAS, S. L.. The controller had installed video surveillance cameras which, among other things, also… SPAIN ·Art. 5, 13 Aug 16, 2023
€500 RING RING CLIN S.L.: Insufficient cooperation with supervisory authority The Spanish DPA has fined RING RING CLIN S.L. EUR 500 for failing to provide information requested by the DPA during an investigation. SPAIN ·Art. 58 Aug 11, 2023
€6,000 ADENET SYSTEMS, S.L.: Insufficient cooperation with supervisory authority Failure to provide requested information to the Spanish DPA (AEPD) within the required timeframe in violation of Art. 58 GDPR. SPAIN ·Art. 58 Aug 11, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Aug 11, 2023
€6,000 ELECTRAWORKS - CEUTA, S.A.: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on ELECTRAWORKS - CEUTA, S.A.. The controller had failed to provide sufficient information about the retention periods of personal data. The… SPAIN ·Art. 13 Aug 8, 2023
€6,000 ODRIA COSTAS INTERNACIONAL, S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on ODRIA COSTAS INTERNACIONAL, S.L. A data subject had filed a complaint with the DPA because the controller had published a picture of their… SPAIN ·Art. 5 Aug 8, 2023
€10,000 GYMOOGIMNASIOS S.L.: Non-compliance with general data processing principles The Spanish DPA has fined GYMOOGIMNASIOS S.L. EUR 10,000. The controller had installed a reservation system where data subjects had to consent to the processing of health-related… SPAIN ·Art. 5, 7 Aug 2, 2023
€20,000 QUALITY-PROVIDER S.A.: Insufficient cooperation with supervisory authority The Spanish DPA has fined QUALITY-PROVIDER S.A. EUR 20,000 for failing to provide information requested by the DPA during an investigation. SPAIN ·Art. 58 Aug 1, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things recorded common areas of a… SPAIN ·Art. 5 Aug 1, 2023
€56,000 Vodafone España, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. Fraudulent third parties had pretended to be the data subject and asked the controller to change their phone number… SPAIN ·Art. 6 Aug 1, 2023
€56,000 Vodafone España, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM card to an… SPAIN ·Art. 6 Aug 1, 2023
€70,000 TELEFÓNICA MÓVILES ESPAÑA, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 70,000 on TELEFÓNICA MÓVILES ESPAÑA, S.A.U.. A person had filed a complaint with the DPA because the company had given a duplicate of… SPAIN ·Art. 6 Jul 31, 2023
€2.5M Open Bank, S.A.: Insufficient technical and organisational measures to ensure information security The Spanish DPA has fined Open Bank, S.A. EUR 2,5 million. A data subject had filed a complaint with the DPA after being asked to provide proof of origin for payments on their… SPAIN ·Art. 25, 32 Jul 28, 2023
€1,200 FONTANORTE, S.L.: Insufficient technical and organisational measures to ensure information security The Spanish DPA has imposed a fine on FONTANORTE, S.L.. The controller had disposed of documents containing personal data in publicly accessible trash containers. The original… SPAIN ·Art. 32 Jul 27, 2023
€5,000 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 5,000 on a private individual. The controller was both employer and landlord of the data subject. The controller had used the bank… SPAIN ·Art. 5 Jul 27, 2023
€5,000 Private individual: Insufficient legal basis for data processing The Spanish DPA has fined a private individual EUR 5,000 for repeatedly publishing personal data of various data subjects on a public Telegram channel without a valid legal basis. SPAIN ·Art. 6 Jul 27, 2023
€600 Private individual: Insufficient legal basis for data processing The Spanish DPA has fined a private individual. An individual had filed a complaint with the DPA because another individual had written reviews on the internet using a photo of… SPAIN ·Art. 6 Jul 26, 2023
€1,200 SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L.. An individual had filed a complaint with the DPA due to the fact that the… SPAIN ·Art. 6 Jul 26, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of 300 euros on a private individual. The controller had installed video surveillance cameras that recorded a neighbor's property, among other… SPAIN ·Art. 5 Jul 25, 2023