Private individual
€300
Insufficient legal basis for data processing
Fecha de la decisión
21 de febrero de 2023
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine on a private individual. The individual had shared a document containing personal data of the data subject in a WhatsApp group without the data subject's consent. The original fine of EUR 500 was reduced to EUR 300 due to voluntary payment and admission of responsibility
Citas legales
Art. 6 (1)
Problemas e infracciones
Insufficient legal basis for data processing