Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

Website operator – €1,000 Fine (Spain, 2023)

€1,000Agencia Española de Protección de Datos26 April 2023Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A website operator in Spain was fined EUR 1,000 for not having a proper privacy policy on its site. The DPA found that the privacy policy did not meet GDPR requirements. This ruling highlights the need for website operators to ensure their privacy policies are clear and compliant.

What happened

A website operator failed to ensure its privacy policy complied with GDPR requirements.

Who was affected

Visitors to the website who relied on the privacy policy for information about data handling.

What the authority found

The Spanish DPA ruled that the website operator did not meet the requirements of Article 13 of GDPR.

Why this matters

This case shows that website operators must have clear and compliant privacy policies. Businesses should regularly review their policies to ensure they meet legal standards.

Recorded legal citations
Automatically processed
Art. 13 GDPR
View original scraped data
Art. 13(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll Website operator actions
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 1,000 on a website operator for failing to ensure that the privacy policy on its website complied with the requirements of Art. 13 GDPR.

Related Enforcement Actions (7)

Other enforcement actions involving Website operator in ES

Fine
Jul 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) fined a website operator EUR 500 due to the fact that its privacy policy did not comply with the requirements of Art. 13 GDPR.

€500
Fine
Sept 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 9,000 on the controller of a website. A person had filed a complaint with the DPA due to the fact tha...

€9K
Fine
Jan 2022· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 2,000 on a website operator for the lack of a privacy policy on its website, in violation of Art. 13 GDPR...

€2K
Fine
Apr 2022· Agencia Española de Protección de Datos

Insufficient fulfilment of information obligations

€2K
Current
Apr 2023

Fine

€1K

Fine
May 2023· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 5,000 on a website operator for failing to ensure that the privacy policy on its website complied with the r...

€500
Fine
Apr 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 600 on a website operator for failing to ensure that the privacy policy on a website complied with the requi...

€600
Fine
Jun 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on the operator of a website for storing data of a data subject for an excessively long period of time and contrary...

€180

Details

Fine Date

26 April 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€1,000

Enforcement Tracker ID

ETid-1792

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Website operator - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: