Spain

Notary

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-09-01.

Rank · Sector

#368

of 394 in Public Sector and Education

Rank · Spain

#772

of 1,133

Rank · All fines

#2,602

of 3,267

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-09-01
Controller / Processor: Notary
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 2,000 on a private individual.On 22 May 2024, a data subject received a certified letter asking them to sign a document regarding the removal of a plot from their name in the cadastre. The letter contained a cadastre certificate, which named the data subject and their address. It was found that the notary had accessed and shared the data subject's personal data without a legal basis.

Open original source Links to the regulator's original publication or another source.