Spain

Property owner administrative board

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-12-20.

Rank · Sector

#135

of 351 in Individuals and Private Associations

Rank · Spain

#709

of 1,075

Rank · All fines

#2,328

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-12-20
Controller / Processor: Property owner administrative board
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 2,000 on a Property Owners Association. Two property owners had filed a complaint with the DPA. The individuals had submitted a request for a copy of financial documents to the board. The Association however published the requests with personal data of the individuals concerned on the bulletin board in a common area of the respective residential building. The DPA considered this to be a violation of the principle of confidentiality.

Open original source Links to the regulator's original publication or another source.