Two big GDPR fines against banks in Spain suggest the country’s data protection authority is starting to move away from a strategy of cautious enforcement and towards a much tougher approach. Filed under Spain IT & Data Protection Topics Data privacy Enforcement Organisations Telefónica Vodafone