Political Party – €1,500 Fine (Spain, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish political party was fined for emailing a former member without a legal basis for using their personal data. This serves as a reminder that organizations need valid reasons to process personal data, even for former members.
What happened
A political party sent an email to a former member without a legal basis for processing their personal data.
Who was affected
A former member of a Spanish political party who received an unsolicited email.
What the authority found
The Spanish authority fined the political party for processing personal data without a valid legal basis, violating GDPR rules.
Why this matters
This fine highlights the importance of having a legal basis for processing personal data, especially when contacting former members. Organizations should review their data processing practices to avoid similar penalties.
GDPR Articles Cited
Sending of an e-mail to a former party member who had since resigned, with the request to act as an election representative without sufficient legal basis to process the personal data required for this purpose
Related Enforcement Actions (0)
No other enforcement actions found for Political Party in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
11 September 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,500
Enforcement Tracker ID
ETid-399
About this data
Cite as: Cookie Fines. Political Party - Spain (2020). Retrieved from cookiefines.eu
Last updated: