Spain

Private individual

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-07-26.

Rank · Sector

#223

of 351 in Individuals and Private Associations

Rank · Spain

#911

of 1,075

Rank · All fines

#2,799

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-07-26
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has fined a private individual. An individual had filed a complaint with the DPA because another individual had written reviews on the internet using a photo of them and their name without their consent. The original fine of EUR 1,000 was reduced to EUR 600 due to voluntary payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.