Private individual
€600
Insufficient legal basis for data processing
Fecha de la decisión
18 de julio de 2024
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine on a private individual. The individual had shared personal data of a data subject in a Facebook group without their consent. The original fine of EUR 1000 was reduced to EUR 600 due to voluntary payment and admission of responsibility.
Citas legales
Art. 6 (1)
Problemas e infracciones
Insufficient legal basis for data processing