- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Unknown – €10,000 Fine (Spain, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company was fined for sending personal data without permission. They mistakenly emailed a third party a document that included someone else's personal information. This case highlights the need for companies to protect personal data and ensure they have consent before sharing it.
What happened
The company sent an email containing personal data to a third party without consent.
Who was affected
The individual whose personal data was disclosed was affected by this incident.
What the authority found
The Spanish DPA ruled that the company violated data protection rules by sharing personal information without consent.
Why this matters
This case underscores the importance of obtaining consent before sharing personal data. Companies should review their data-sharing practices to avoid similar violations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) imposed a fine of 10,000 EUR on a company for violating Art. 5 GDPR. The company sent an e-mail to a third party with the dismissal and settlement document of the data subject, disclosing their personal data without their consent.
Related Enforcement Actions (8)
Other enforcement actions involving Unknown in ES
Fine
€10K
Details
Fine Date
9 December 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. Unknown - Spain (2020). Retrieved from cookiefines.eu
Last updated: