Private individual – €10,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A private individual in Spain was fined €10,000 for posting someone else's personal information online without their consent. This case matters because it shows that individuals can also be held accountable for privacy violations. Anyone advertising services should ensure they have permission to use personal data.
What happened
The Spanish DPA fined a private individual for uploading another person's personal data to advertise a massage service.
Who was affected
The individual whose name, picture, and phone number were posted online was affected.
What the authority found
The DPA found that the individual lacked consent to process the other person's personal data, violating data protection rules.
Why this matters
This case emphasizes that privacy laws apply to everyone, not just businesses. Individuals should always get consent before using someone else's personal information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The controller had uploaded an individual's personal data, including their name, a picture and their telephone number, to advertise a massage service on a website, even though the individual had not given their consent.
Related Enforcement Actions (20)
Other enforcement actions involving Private individual in ES
Details
Fine Date
15 November 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€10,000
Enforcement Tracker ID
ETid-2115
About this data
Cite as: Cookie Fines. Private individual - Spain (2023). Retrieved from cookiefines.eu
Last updated: