Private individual
€5,000
Non-compliance with general data processing principles
Fecha de la decisión
27 de julio de 2023
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine of EUR 5,000 on a private individual. The controller was both employer and landlord of the data subject. The controller had used the bank details provided on the data subject's employment contract to collect rent without the data subject's consent.
Citas legales
Art. 5 (1)
Problemas e infracciones
Non-compliance with general data processing principles