Private individual
€300
Insufficient legal basis for data processing
Decision Date
February 21, 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine on a private individual. The individual had shared a document containing personal data of the data subject in a WhatsApp group without the data subject's consent. The original fine of EUR 500 was reduced to EUR 300 due to voluntary payment and admission of responsibility
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing