Spain

Private individual

6,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-02-16.

Rank · Sector

#58

of 351 in Individuals and Private Associations

Rank · Spain

#472

of 1,075

Rank · All fines

#1,622

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-02-16
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 6,000 on a private individual. The data subject had filed a complaint against the data controller for publishing images of herself in a bikini on a website without prior authorization. The data subject had originally uploaded the images of herself in a bikini to the second-hand platform Vinted, where she offered the bikini for sale.

Open original source Links to the regulator's original publication or another source.