🇪🇸 When a Loan Simulation on a Website Turns into a Real Loan…
Data Subject Rights, Retention & Minimisation | 26/03/2025
Right to Erasure Not Applied, a Bank Sanctioned by the AEPD Source : PS 00196-2024

📝 Facts

A citizen conducted a loan simulation on an online compar...
Read more
🇪🇸 CCTV Surveillance: When a Hotel Gets Tangled in Its Retention Periods!!!
Biometrics & Video Surveillance | 26/03/2025
⚠️ Inconsistencies in Data Retention Policy 📢 AEPD Issues a Warning! 📌 Facts:

📅 05/11/2022 – Client Request 🛎️ A guest at a Spanish hotel requested ...
Read more
🇪🇸 Spain: An Influencer Sanctioned by the AEPD After Posting a Video on TikTok!
Data Subject Rights, Retention & Minimisation, Legal basis | 26/03/2025
📢 Consent is Never Implicit!

Source : PS 00471-2023

📱 A content creator posted a video on TikTok and Instagram, featuring a 13-year-old minor answe...
Read more
🇪🇸 Spain: When a postal service provider abandons letters in a field...
Confidentiality & Security | 26/03/2025
📄 Facts: • September 28, 2022: 📌 Police in La Palma discovered 1,404 letters abandoned in a field. 📌 A complaint was filed with the AEPD. The provide...
Read more
🇪🇸 No Facial Recognition System for Work Time Control!
Biometrics & Video Surveillance | 26/03/2025
AEPD Sanctions Cartonajes Bañeres S.A. for GDPR Violations 🇪🇸 Source : PS 00361-2023

The Spanish Data Protection Agency (AEPD) has imposed a €220,00...
Read more
🇪🇸 An Employer Cannot Publish Personal Information About a Former Employee in Comments 🇪🇸
Confidentiality & Security, Legal basis | 26/03/2025
Source : PS-00395-2021

👁️ Facts: In response to negative reviews left by customers on Google, a Spanish café published the personal data of its form...
Read more
🇪🇸A lack of supervision in the subcontracting relationship
Subcontracting, Legal basis | 26/03/2025
🇪🇸🚨 Accessing Driving License Points Without Customer Consent: An Auto Insurance Company Fined 🚨

The AEPD has imposed a €300,000 fine for illegally a...
Read more
🇪🇸 A health insurance contract… without consent!
Legal basis | 26/03/2025
📢 Erroneous Subscription and Unjustified Bank Withdrawals: SANITAS and BBVA Sanctioned Source : PS 00479-2023 📌 Facts:

🛡️ A health insurance contra...
Read more
🇪🇸 Garbage: Lack of data confidentiality, a club sanctioned
Confidentiality & Security | 26/03/2025
⚠️ Using a Document Shredder Can Prevent Penalties! ⚠️ Source : PS-00460-2024

🏆 A Spanish football club fined for throwing personal data in the tras...
Read more
🇪🇸Privacy: A Bug Generates Automatic Sending of Data to Third Parties
Confidentiality & Security | 26/03/2025
🚨 Health Data and Adequate Protection! 🚨 Source : PS 00540-2024

A Spanish health insurance provider fined €600,000 for a confidentiality breach. The...
Read more
🇮🇹 Confidentiality: a doctor sends a file with his patients' data by email
Confidentiality & Security | 26/03/2025
🚨 A doctor forgets the fundamental rules of the GDPR! 🚨🇮🇹 📧 Sending a patient list by email, a costly mistake!

To justify a work schedule change, a d...
Read more
🇪🇸 Insurance company fined for safety failure ⚖️💰
Confidentiality & Security, Tools & Documentation | 26/03/2025
Source : PS-00453-2023 🔴 The Facts 📅 October 2022: A cyberattack 💻 compromised the personal data of 1.6 million people. 🔓 Method: A brute force attac...
Read more