Spain

Aena, S.M.E., S.A.

10,043,002 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-11-06.

Rank · Sector

of 165 in Transportation and Energy

Rank · Spain

of 1,071

Rank · All fines

#43

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-11-06
Controller / Processor: Aena, S.M.E., S.A.
Sector: Transportation and Energy
Quoted Articles: Art. 35 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 10,043,002 on Aena, S.M.E., S.A. The controller conducted a pilot project involving multiple airports, including the use of facial recognition systems. However, the controller failed to carry out a data protection impact assessment prior to doing so.

Open original source Links to the regulator's original publication or another source.