Spain

Private individual

1,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-12-20.

Rank · Sector

#181

of 351 in Individuals and Private Associations

Rank · Spain

#838

of 1,075

Rank · All fines

#2,649

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-12-20
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) c) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 1,000 on a private individual. A person had filed a complaint with the DPA because the controller had published their personal data such as name, surname, ID card number and date of birth without their consent in a WhatsApp group with 31 members. The DPA considered this to be a violation of the principle of data minimization.

Open original source Links to the regulator's original publication or another source.