Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

Website operator – €500 Fine (Spain, 2023)

€500Agencia Española de Protección de Datos31 May 2023Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A website operator in Spain was fined for not having a proper privacy policy. The Spanish DPA found that the website's privacy policy did not meet GDPR requirements. This case serves as a reminder for online businesses to regularly review their privacy practices.

What happened

The Spanish DPA fined a website operator for failing to comply with GDPR's privacy policy requirements.

Who was affected

Users visiting the website who were not adequately informed about how their data would be used.

What the authority found

The DPA determined that the website operator violated Article 13 of GDPR by not providing a compliant privacy policy.

Why this matters

This fine highlights the necessity for website operators to ensure their privacy policies are up-to-date and compliant with GDPR. Regular reviews can help avoid penalties.

Recorded legal citations
Automatically processed
Art. 13 GDPR
View original scraped data
Art. 13(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 17 March 2026.

Processing notes: amount discrepancy, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll Website operator actions
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 5,000 on a website operator for failing to ensure that the privacy policy on its website complied with the requirements of Art. 13 GDPR.

Related Enforcement Actions (7)

Other enforcement actions involving Website operator in ES

Fine
Jul 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) fined a website operator EUR 500 due to the fact that its privacy policy did not comply with the requirements of Art. 13 GDPR.

€500
Fine
Sept 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 9,000 on the controller of a website. A person had filed a complaint with the DPA due to the fact tha...

€9K
Fine
Jan 2022· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 2,000 on a website operator for the lack of a privacy policy on its website, in violation of Art. 13 GDPR...

€2K
Fine
Apr 2022· Agencia Española de Protección de Datos

Insufficient fulfilment of information obligations

€2K
Fine
Apr 2023· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 1,000 on a website operator for failing to ensure that the privacy policy on its website complied with the r...

€1K
Current
May 2023

Fine

€500

Fine
Apr 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 600 on a website operator for failing to ensure that the privacy policy on a website complied with the requi...

€600
Fine
Jun 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on the operator of a website for storing data of a data subject for an excessively long period of time and contrary...

€180

Details

Fine Date

31 May 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€500

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Website operator - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: