EDP España S.A.U. – €75,000 Fine (Spain, 2020)

€75,000Agencia Española de Protección de Datos7 January 2020Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

EDP España was fined €75,000 for processing personal data without consent. This case underlines the necessity for companies to have a valid legal basis, like consent, before using personal information. Businesses should review their data practices to ensure they comply with privacy laws.

What happened

EDP España processed personal data without obtaining consent from the individuals.

Who was affected

Individuals whose personal data was used by EDP España without their permission.

What the authority found

The Spanish data protection authority fined EDP for processing data without a valid legal basis, violating GDPR requirements.

Why this matters

This decision stresses the importance of obtaining proper consent or having a valid legal basis for data processing, urging companies to align their practices with GDPR standards.

GDPR Articles Cited

Art. 6 GDPR
Full Legal Summary
Detailed

The company processed personal data such as first and last name, tax number, address and mobile phone number without the consent of the data subject

Related Enforcement Actions (0)

No other enforcement actions found for EDP España S.A.U. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

7 January 2020

Authority

Agencia Española de Protección de Datos

Fine Amount

€75,000

Enforcement Tracker ID

ETid-173

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. EDP España S.A.U. - Spain (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: