Private individual – €1,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Another individual in Spain was fined €1,000 for sharing someone's personal data in a WhatsApp group without permission. This case is significant because it shows that even sharing data in small groups can lead to legal trouble. It reminds everyone to be cautious about sharing others' personal information.
What happened
A person shared another individual's personal data in a WhatsApp group without consent.
Who was affected
The individual whose personal data was shared without permission.
What the authority found
The Spanish data protection authority ruled that the individual violated data protection rules by not minimizing the data shared.
Why this matters
This ruling underscores the principle of data minimization, reminding everyone to limit the sharing of personal information to what is necessary. It serves as a cautionary tale for anyone using social media or messaging apps.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 17 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine of EUR 1,000 on a private individual. A person had filed a complaint with the DPA because the controller had published their personal data such as name, surname, ID card number and date of birth without their consent in a WhatsApp group with 31 members. The DPA considered this to be a violation of the principle of data minimization.
Related Enforcement Actions (20)
Other enforcement actions involving Private individual in ES
Details
Fine Date
20 December 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,000
About this data
Cite as: Cookie Fines. Private individual - Spain (2022). Retrieved from cookiefines.eu
Last updated: