Private individual – €2,000 Fine (Spain, 2022)

€2,000Agencia Española de Protección de Datos20 May 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A private individual running three websites was fined €2,000 for not getting user consent to process personal data. The Spanish data protection authority found that the websites lacked proper privacy policies and consent fields. This ruling emphasizes the need for clear consent mechanisms on websites.

What happened

The individual was fined for failing to include a consent field for personal data processing on their websites.

Who was affected

Visitors to the individual's three websites whose personal data was processed without proper consent.

What the authority found

The Spanish authority determined that the individual violated GDPR by not providing a way for users to consent to data processing.

Why this matters

This fine serves as a warning to website operators about the necessity of clear consent practices. It shows that even small operators can face penalties for non-compliance with data protection laws.

GDPR Articles Cited

AI-verified

Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA has fined a private individual operating three websites EUR 2,000. During its investigation, the DPA found that all three websites lacked a field for giving consent to the processing of personal data. In addition, the DPA found that the privacy policies on the websites were missing any reference to the identity of the data controller and to the right of data subjects to withdraw their consent to data processing.

Related Enforcement Actions (20)

Other enforcement actions involving Private individual in ES

Current
May 2022

Fine

€2K

Details

Fine Date

20 May 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€2,000

Enforcement Tracker ID

ETid-1184

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Private individual - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: