Private individual – €1,000 Fine (Spain, 2022)

€1,000Agencia Española de Protección de Datos20 December 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Another individual in Spain was fined €1,000 for sharing someone's personal data in a WhatsApp group without permission. This case is significant because it shows that even sharing data in small groups can lead to legal trouble. It reminds everyone to be cautious about sharing others' personal information.

What happened

A person shared another individual's personal data in a WhatsApp group without consent.

Who was affected

The individual whose personal data was shared without permission.

What the authority found

The Spanish data protection authority ruled that the individual violated data protection rules by not minimizing the data shared.

Why this matters

This ruling underscores the principle of data minimization, reminding everyone to limit the sharing of personal information to what is necessary. It serves as a cautionary tale for anyone using social media or messaging apps.

GDPR Articles Cited

AI-verified

Art. 5(1)(c) GDPR
View original scraped data
Art. 5(1) c) GDPR

Original data from scraper before AI verification against source document.

Source verified 17 March 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 1,000 on a private individual. A person had filed a complaint with the DPA because the controller had published their personal data such as name, surname, ID card number and date of birth without their consent in a WhatsApp group with 31 members. The DPA considered this to be a violation of the principle of data minimization.

Related Enforcement Actions (20)

Other enforcement actions involving Private individual in ES

Current
Dec 2022

Fine

€1K

Details

Fine Date

20 December 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€1,000

Enforcement Tracker ID

ETid-1534

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Private individual - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: