- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
A.A.A – Complaint Upheld (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Spanish Data Protection Agency reprimanded the Ministry of Inclusion for sending an email to the wrong recipient. This incident violated data confidentiality rules under GDPR. It serves as a reminder for organizations to handle personal data carefully to avoid breaches.
What happened
The Ministry of Inclusion sent a personal email to the wrong person, breaching data confidentiality.
Who was affected
Individuals whose personal data was involved in the email mishap.
What the authority found
The authority found that the Ministry failed to uphold confidentiality in data processing, resulting in a reprimand.
Why this matters
This case highlights the importance of careful data handling by organizations to protect personal information and avoid breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Automated check recorded — 23 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
An Email was missent by the ministry of inclusion, social security and migration. The AEPD charged them under Article 32 and 5 (1) (f) GDPR, but only issued a reprimand. The DPA held that the missending of the email infringes the confidentiality in processing of data.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (1)
Other enforcement actions involving A.A.A in ES
Details
Decision Date
28 October 2022
Authority
Agencia Española de Protección de Datos
About this data
Cite as: Cookie Fines. A.A.A - Spain (2022). Retrieved from cookiefines.eu
Last updated: