Homeowners Association – €6,000 Fine (Spain, 2022)

€6,000Agencia Española de Protección de Datos11 May 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A homeowners' association in Spain was fined EUR 6,000 for requiring residents to show ID to use a communal pool, which was unnecessary. The Spanish DPA found this violated GDPR's data minimization principle. This case serves as a reminder to collect only essential personal data.

What happened

The homeowners' association required residents to show ID to use a communal pool, which was deemed unnecessary.

Who was affected

Residents of an apartment complex who were asked to show ID before using the communal pool.

What the authority found

The Spanish DPA ruled that the homeowners' association violated GDPR by collecting unnecessary personal data, breaching the data minimization principle.

Why this matters

This ruling highlights the need for organizations to collect only necessary personal data. It serves as a cautionary tale for businesses to evaluate their data collection practices, especially in light of privacy regulations.

GDPR Articles Cited

Art. 13 GDPR
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine of EUR 6,000 on a homeowners' association. An apartment owner who had been a resident for 15 years had filed a complaint with the DPA due to the fact of having to show ID before using the communal pool. This request for personal data was based on measures to combat the covid-19 pandemic. During its investigation, the DPA found that the collection of the pesonal data through the ID check was unnecessary given the fact that the data subject had been a resident for 15 years, and thus violated the principle of data minimization set forth in Art. 5 (1) c) GDPR. Furthermore, the DPA found that the data subject had not been sufficiently informed about the processing of their personal data.

Details

Fine Date

11 May 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€6,000

Enforcement Tracker ID

ETid-1166

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Homeowners Association - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: