- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Homeowners Association – €6,000 Fine (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A homeowners' association in Spain was fined EUR 6,000 for requiring a long-term resident to show ID before using the communal pool. The Spanish DPA found this unnecessary and a violation of data minimization rules. This case serves as a reminder for organizations to ensure that personal data requests are justified.
What happened
The homeowners' association collected unnecessary personal data by requiring ID checks for pool access.
Who was affected
A long-term resident of the apartment complex who was asked to show ID to access the pool.
What the authority found
The Spanish DPA determined that the association violated GDPR's data minimization principle and failed to inform the resident adequately about data processing.
Why this matters
This case highlights the need for organizations to carefully assess their data collection practices. Homeowners' associations should ensure that any data requests are necessary and transparent.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine of EUR 6,000 on a homeowners' association. An apartment owner who had been a resident for 15 years had filed a complaint with the DPA due to the fact of having to show ID before using the communal pool. This request for personal data was based on measures to combat the covid-19 pandemic. During its investigation, the DPA found that the collection of the pesonal data through the ID check was unnecessary given the fact that the data subject had been a resident for 15 years, and thus violated the principle of data minimization set forth in Art. 5 (1) c) GDPR. Furthermore, the DPA found that the data subject had not been sufficiently informed about the processing of their personal data.
Related Enforcement Actions (10)
Other enforcement actions involving Homeowners Association in ES
Fine
€6K
Details
Fine Date
11 May 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€6,000
About this data
Cite as: Cookie Fines. Homeowners Association - Spain (2022). Retrieved from cookiefines.eu
Last updated: