Private individual – €4,000 Fine (Spain, 2023)

€4,000Agencia Española de Protección de Datos21 September 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A private individual in Spain was fined EUR 4,000 after a tenant complained about a video surveillance camera installed in their shared kitchen without consent. The Spanish data protection authority ruled that the individual did not have a valid reason for the surveillance. This case underscores the importance of obtaining consent when using cameras in shared spaces.

What happened

A private individual installed a video surveillance camera in a shared kitchen without the tenant's consent.

Who was affected

The tenant who rented a room and was recorded by the surveillance camera.

What the authority found

The Spanish data protection authority determined that the individual lacked a valid legal basis for the surveillance, violating data protection rules.

Why this matters

This ruling highlights the necessity of obtaining consent from individuals before recording them, especially in shared living spaces. It serves as a critical reminder for landlords and anyone using surveillance in private areas.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
View original scraped data
Art. 6(GDPR)

Original data from scraper before AI verification against source document.

Source verified 15 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 4,000 on a private individual. An individual had rented a room from the controller and filed a complaint against them due to the fact that the controller had installed a video surveillance camera in the shared kitchen without their consent.

Related Enforcement Actions (20)

Other enforcement actions involving Private individual in ES

Current
Sept 2023

Fine

€4K

Details

Fine Date

21 September 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€4,000

Enforcement Tracker ID

ETid-2035

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Private individual - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: