Private individual
€600
Insufficient legal basis for data processing
Decision Date
July 26, 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has fined a private individual. An individual had filed a complaint with the DPA because another individual had written reviews on the internet using a photo of them and their name without their consent. The original fine of EUR 1,000 was reduced to EUR 600 due to voluntary payment and admission of responsibility.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing