Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

LABORATORIOS GONZÁLEZ, S.L. – €16,000 Fine (Spain, 2022)

€16,000Agencia Española de Protección de Datos29 April 2022Spain
reduced
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

LABORATORIOS GONZÁLEZ, S.L. was fined €16,000 for sending a Covid-19 test result to a person's boss without their consent. The Spanish data protection authority found that the laboratory did not have permission to share this sensitive information. This case emphasizes the importance of confidentiality in health-related matters.

What happened

The laboratory shared a person's Covid-19 test results with their employer without obtaining consent.

Who was affected

The individual whose Covid-19 test results were shared without their permission.

What the authority found

The authority ruled that the laboratory violated GDPR rules by failing to protect personal health information.

Why this matters

This ruling underscores the critical need for businesses to respect privacy, especially regarding health data. Companies must ensure they have consent before sharing sensitive information.

Recorded legal citations
Automatically processed
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1) f) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 13 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA (AEPD) has fined LABORATORIOS GONZÁLEZ, S.L.. The laboratory had sent the results of a Covid-19 test that the data subject had taken not only to them but also to their boss without their consent. The original fine of EUR 20,000 was reduced to EUR 16,000 due to immediate payment.

Related Enforcement Actions (0)

No other enforcement actions found for LABORATORIOS GONZÁLEZ, S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

29 April 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€16,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. LABORATORIOS GONZÁLEZ, S.L. - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: