- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Homeowners Association – €15,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A homeowners' association was fined for publicly displaying meeting records that included personal information about residents. This case matters because it shows that even community organizations must protect people's privacy.
What happened
The homeowners' association displayed records of a meeting in a public elevator that included personal details of participants.
Who was affected
Residents of the building who were mentioned in the publicly displayed meeting records.
What the authority found
The Spanish Data Protection Agency found that the homeowners' association violated GDPR rules by not ensuring the confidentiality of personal data.
Why this matters
This case highlights the need for organizations, even small ones, to handle personal information carefully. They must prioritize privacy to avoid legal issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) imposed a fine of EUR 15,000 on a homeowners' association. The controller had publicly displayed the record of a homeowners' meeting in the elevator of the building where the participants lived. From the records, the names, floors and apartment numbers of the meeting participants could be obtained, as well as the floors and apartment numbers of neighbors about whom the participants had complained during the meeting. The controller had justified the public notice with the fact that the results of this meeting concerned planned legal actions against some of the residential parties. They were to be informed about this so that they would not be able to claim later that they had not received the relevant notifications. The DPA considers this to be a violation of Art. 5 (1) f) GDPR, which refers to the principles of integrity and confidentiality of personal data.
Related Enforcement Actions (12)
Other enforcement actions involving Homeowners Association in ES
Fine
€15K
Details
Fine Date
9 March 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€15,000
About this data
Cite as: Cookie Fines. Homeowners Association - Spain (2021). Retrieved from cookiefines.eu
Last updated: