Spain data protection fine 50,000 Euro

Date: 25.11.2019

Responsible body: La Tribuna de Cartagena

Nature of the data protection breach: publication of personal data of the crime victim

The Spanish Data Protection Authority (AEPD) has imposed a fine of 50,000 euros on the portal La Tribuna de Cartagena. According to media reports, the reason for the fine is the publication of information and pictures of the victim of a crime committed in Pamplona in 2018.

The AEPD considers that in this case the right to protection of personal data takes precedence over the intended public interest in disclosure. The facts of the case constitute a breach of Article 6 of the GDPR which states that the processing personal data requires the consent of the person concerned.

The portal could not prove that it has the consent of the persons concerned, in relation to the use of their personal data.

Legal basis for the fine: Article 6

Fines: EUR 50,000

Country: Spain

Source: Spanish data protection supervisory authority AEPD (ES)

Back to the overview of the data breaches