Spain

Private individual

6,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-12-21.

Rank · Sector

#56

of 351 in Individuals and Private Associations

Rank · Spain

#470

of 1,075

Rank · All fines

#1,618

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-12-21
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 6,000 on a private individual. The person had shared a video on Twitter showing images of a sexual assault by a man on a woman. The purpose of sharing the video was to draw attention to domestic violence against women. The DPA considers the sharing to be unlawful. Even though the person may have had a legitimate interest in sharing the video, the victim's right to privacy prevails.

Open original source Links to the regulator's original publication or another source.