Private individual
€10,000
Insufficient legal basis for data processing
Fecha de la decisión
1 de septiembre de 2022
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The individual had published personal data of another person on a blog without their consent and in a defamatory manner.
Citas legales
Art. 6 (1)
Problemas e infracciones
Insufficient legal basis for data processing