Record penalty of more than 8 million for Vodafone for infringing the data law
AEPD has fined 8.15 million euros against the British telephone operator with 8.15 million euros for marketing activities in breach of GDPR.
Spain
CJEU fines Spain €15 million for failure to implement Data Protection Law Enforcement Directive
The Court of Justice of the European Union (CJEU) ordered Spain to pay the European Commission 15.5 million euros and a potential daily fine thereafter for failing to transpose the Data Protection Law Enforcement Directive (Directive (EU) 2016/680).
The Spanish Supervisory Authority Approves a GDPR Code of Conduct on Advertising
On September 16, 2020, the Spanish Supervisory Authority (AEPD) approved a “Code of Conduct for Data Processing in Advertising”. This […]
Apple hit with privacy complaints over iPhone tracking tool
A privacy group Noyb has filed complaints with the German and Spanish data protection authorities under the EU’s Cookie Law […]
Spanish DPA fines company for the cookie policy with 30,000 euros
The Spanish Data Protection Authority fined the company Vueling for the cookie policy used on its website with 30,000 euros […]
Spanish court determines that energy consumption data is personal data
Spain’s Supreme Court has ruled that energy consumption data is protected by the Law on Data Protection as they are […]
European Commission refers Greece and Spain to Court
The European Commission decided to refer Greece and Spain to the Court of Justice of the EU for failing to […]
Spanish DPA fines soccer league 250K euros
La Liga has been fined 250,000 euros for violating the Spanish Data Protection Agency (AEPD) and the European General Data […]
New Spanish Data Protection Act partly nullified by the Constitutional Court
On 22 May 2019 it was disclosed that the Spanish Constitutional Court had decided to nullify indent 2 of the […]
The Spanish DPA publishes a list of processing operations for which a DPIA is mandatory
After having received the favorable opinion of the European Data Protection Board, the Spanish Data Protection Agency (“AEPD”) released last […]
Spain: Guide on cyber incidents establishes a “one-stop notification system”
The Government of Spain announced, on 23 January 2019, that it had issued a guide on the notification and management […]
In Spain, data breach notifications increase since the entry into application of the GDPR
The Spanish data protection authority – Agencia Española de Protección de Datos or AEPD – has received 418 notifications of […]