Spain

Private individual

160 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-08-28.

Rank · Sector

#355

of 361 in Individuals and Private Associations

Rank · Spain

#1,102

of 1,104

Rank · All fines

#3,182

of 3,197

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-08-28
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 160 on a private individual. After a disput. the data subject ended a lease agreement for a flat they had rented. Following this, the landlord demanded payment of alleged rent arrears, thratening to contact the data subjects employer and inform them of the alleged misconduct. The landlord then sent the afformentioned email, in this they gave his ID number, phone, private email and details of the alleged rent arrears and accused them of criminal conduct. The email was forwarded to the data subject who subsequently launched a complaint with the authority. The landlord was fined EUR 200, this original fine was reduced to EUR 160 due to immediate payment.

Open original source Links to the regulator's original publication or another source.