Colegio Arenales Carabanchel (School) – €3,000 Fine (Spain, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Colegio Arenales Carabanchel was fined €3,000 for sharing student photos without permission. This incident underscores the importance of having a legal basis before sharing personal information. Schools and similar institutions should review their data-sharing practices to ensure compliance.
What happened
The school shared student photos with third parties who published them without a legal basis.
Who was affected
Students whose photos were shared and published without consent.
What the authority found
The Spanish data protection authority ruled the school lacked a valid legal basis for sharing personal data, violating GDPR.
Why this matters
This case emphasizes the importance of obtaining proper consent before sharing personal data. Educational institutions must ensure they have clear permissions to avoid legal issues.
GDPR Articles Cited
The decision of the data protection authority states that the school transferred pictures (and therefore personal data) to third parties, who published them without legal basis.
Related Enforcement Actions (0)
No other enforcement actions found for Colegio Arenales Carabanchel (School) in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
14 February 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-207
About this data
Cite as: Cookie Fines. Colegio Arenales Carabanchel (School) - Spain (2020). Retrieved from cookiefines.eu
Last updated: