- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Property Owner Community – €1,200 Fine (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A property owners' community in Spain was fined for sharing sensitive meeting minutes that included personal information without proper safeguards. This case highlights the importance of data minimization and protecting residents' privacy. It serves as a reminder for organizations to limit the sharing of personal data to what is strictly necessary.
What happened
The Spanish DPA fined a property owners' community for sending sensitive meeting minutes to a security company without anonymizing the data.
Who was affected
Residents of the property owners' community whose personal information was included in the meeting minutes were affected.
What the authority found
The authority found that the community violated the principle of data minimization by sharing unnecessary personal information.
Why this matters
This case underscores the need for organizations to carefully consider what personal data they share and with whom. It serves as a warning that failing to protect residents' privacy can lead to financial penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has fined a property owners' community EUR 1,200. A property manager had sent a copy of the general meeting minutes to the director of the security company 'CMM Seguridad'. The document the said document contains the names and addresses of residents, a list of defaulters and the accounts with all income and expenses of the community. According to the controller, the purpose of sending the minutes in question to the security company was to inform them about the members of the Board of Directors appointed at the respective ordinary general meeting. Therefore, the controller should have limited to only providing this information or to transmitting the minutes document after it had been duly anonymized. For this reason, the DPA notes that the transmission of the full minutes would not have been necessary. As a result, the controller violated the principle of data minimization.
Related Enforcement Actions (2)
Other enforcement actions involving Property Owner Community in ES
Fine
€1K
Details
Fine Date
21 January 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,200
About this data
Cite as: Cookie Fines. Property Owner Community - Spain (2022). Retrieved from cookiefines.eu
Last updated: