Region: Spain

Spanish Supreme Court clears covid-19 passports

Spain’s highest court has ruled that forcing individuals to show covid-19 health information to establishment owners in order to gain access does not violate data protection rights, as the relevant health data is not stored or processed.

17 September 2021

Spain DPA fines processor for failure to return data

Spain’s data watchdog has ordered a data processor to pay €100,000 for failing to return data to the data controller after its processing contract expired.

08 September 2021

Spanish supermarket accepts hefty facial recognition fine

Mercadona has agreed to pay more than €2 million to settle proceedings with Spain’s data authority over facial recognition used in its shops.

28 July 2021

Italian watchdog fines delivery firm for gig worker algorithms

Italy’s data regulator has issued a €2.6 million fine to food delivery service Foodinho and ordered the company to change its employee management algorithms.

06 July 2021

Q&A: Ex-Spanish DPA chief José Luis Piñar

José Luis Piñar led Spain’s data protection authority from 2002 to 2007 and is currently counsel at CMS in Madrid. He spoke to GDR about the Spanish watchdog’s recent guidance on data risk assessment and the need for EU-wide guidelines.

01 July 2021

Spanish authority issues another million-euro fine

The Spanish data protection authority has fined an energy provider €1.5 million, marking the latest in a string of hefty penalties issued as the regulator ramps up its enforcement efforts.

07 May 2021

Equifax fined one million euro in Spain

The Spanish data protection authority has fined credit rating agency Equifax €1 million for adding publicly available debt information to its own database.

28 April 2021

Vodafone hit with multimillion-euro GDPR fine

After receiving dozens of small fines since the GDPR came into force, Vodafone Spain has finally been slapped with a hefty fine for its data and marketing practices – but has promised to appeal.

15 March 2021

Data enforcement looks set to hot up in Spain

Two big GDPR fines against banks in Spain suggest the country’s data protection authority is starting to move away from a strategy of cautious enforcement and towards a much tougher approach.

19 January 2021

Second Spanish big bank GDPR fine to be appealed

In a near-identical repeat of a penalty issued in December, Spain’s data protection authority has fined CaixaBank €6 million for GDPR infringements.

18 January 2021

Get unlimited access to all Global Data Review content