ARES CAPITAL, S.A. – €200,000 Fine (Spain, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
ARES CAPITAL, S.A. was fined for requiring employees to use their personal phones for work, which led to invasive monitoring. This is significant because it raises concerns about employee privacy and the extent of surveillance companies can impose without proper justification. Businesses should be aware of their responsibilities to protect employee privacy when using personal devices for work.
What happened
ARES CAPITAL, S.A. forced employees to use their personal mobile phones for work and installed surveillance apps without a valid legal basis.
Who was affected
Employees of ARES CAPITAL, S.A. who were required to use their personal devices for work purposes and faced monitoring.
What the authority found
The Spanish DPA ruled that the company lacked a sufficient legal basis for the extensive surveillance of employees' personal devices, violating GDPR's requirements for lawful processing.
Why this matters
This ruling emphasizes the need for companies to respect employee privacy and to have clear legal justifications for monitoring practices. It serves as a warning that invasive surveillance can lead to significant penalties.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has imposed a fine of EUR 200,000 on ARES CAPITAL, S.A. The controller required its employees to use mobile phones for work purposes. The controller offered corporate devices for this purpose, but was unable to provide enough for all employees who did not want to use their own mobile phones. Employees who used their own devices had to install multiple surveillance applications that continuously monitored all activity on those devices. The controller had no sufficient legal basis for this extensive surveillance. Additionally, the controller failed to adequately inform data subjects regarding the processing.
Related Enforcement Actions (1)
Other enforcement actions involving ARES CAPITAL, S.A. in ES
Details
Fine Date
4 March 2026
Authority
Agencia Española de Protección de Datos
Fine Amount
€200,000
Enforcement Tracker ID
ETid-1263
About this data
Cite as: Cookie Fines. ARES CAPITAL, S.A. - Spain (2026). Retrieved from cookiefines.eu
Last updated: