Spain
Political Party
1,500 €
GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-09-11.
Rank · Sector
#364
of 385 in Public Sector and Education
Rank · Spain
#779
of 1,104
Rank · All fines
#2,607
of 3,197
Case details
- Authority
- Spanish Data Protection Authority (aepd)
- Date
- 2020-09-11
- Controller / Processor
- Political Party
- Sector
- Public Sector and Education
- Quoted Articles
- Art. 5 GDPR, Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
Sending of an e-mail to a former party member who had since resigned, with the request to act as an election representative without sufficient legal basis to process the personal data required for this purpose
Open original source
Links to the regulator's original publication or another source.
Related fines
Spain
2025-04-07
14,400,000 €
ETid-3192
AMADEUS IT GROUP, S.A.
Transportation and Energy
Spain
2025-11-06
10,043,002 €
ETid-2962
Aena, S.M.E., S.A.
Transportation and Energy
Spain
2022-05-18
10,000,000 €
ETid-1176
Google LLC
Media, Telecoms and Broadcasting
Spain
2021-03-11
8,150,000 €
ETid-594
Vodafone España, S.A.U.
Media, Telecoms and Broadcasting
Spain
2023-12-27
6,500,000 €
ETid-2532
THE PHONE HOUSE SPAIN, S.L.
Media, Telecoms and Broadcasting
Spain
2023-10-25
6,100,000 €
ETid-2220
ENDESA ENERGÍA, S.A.U.
Transportation and Energy