National Police Brigade – €6,000 Fine (Spain, 2020)

€6,000Agencia Española de Protección de Datos19 June 2020Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Spain's National Police Brigade was fined €6,000 for copying business records during investigations without a legal reason. This matters because it shows that even law enforcement must respect privacy rules when handling personal data.

What happened

The National Police Brigade copied business records containing third-party data without a legal basis.

Who was affected

Individuals whose data was included in the business records copied by the police.

What the authority found

The Spanish data protection authority found that the police lacked a legal basis for processing the copied data, violating GDPR rules.

Why this matters

This case highlights that all organizations, including police forces, must have a valid reason to process personal data. It serves as a reminder that privacy laws apply to everyone, not just private companies.

GDPR Articles Cited

Art. 5 GDPR
Art. 6 GDPR
Full Legal Summary
Detailed

Making copies of a company's business records in the context of investigations which contained data from third parties and for which there was no legal basis for processing.

Related Enforcement Actions (0)

No other enforcement actions found for National Police Brigade in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

19 June 2020

Authority

Agencia Española de Protección de Datos

Fine Amount

€6,000

Enforcement Tracker ID

ETid-323

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. National Police Brigade - Spain (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: