Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

DPA case IAI 68/2021 - IAI 71/2021 – Violation Found (Spain, 2021)

Violation Found
DPA APDCAT4 November 2021Spain
final
Violation Found

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A journalist in Spain requested access to documents about past water pollution cases but faced delays in receiving the information. The Catalan Data Protection Authority found that while the request was in the public interest, it also had to consider data protection laws. This situation illustrates the balance between public access to information and protecting personal data.

What happened

The journalist's request for access to environmental information was delayed due to data protection concerns.

Who was affected

The journalist seeking information about historical water pollution cases.

What the authority found

The Catalan DPA recognized that access to environmental information is important but must comply with data protection regulations.

Why this matters

This case highlights the ongoing challenge of balancing transparency and privacy. Organizations should ensure they understand how to navigate these competing interests.

Recorded legal citations
Automatically processed
Art. 2 GDPR
Art. 9 GDPR
Art. 10 GDPR
Art. 4(1) GDPR
Art. 86 GDPR
View original scraped data
Art. 9(GDPR)
Art. 10(GDPR)
Art. 86(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Art. 27 LOPDGDD
Art. 83 Ley 20/2009
Ley 27/2006

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A journalist made an access to document request regarding proceedings dating back to 1975 sanctioning water pollution emanating from a petrochemical industrial zone in Tarragona. The journalist did not receive the information requested in due time, and filed a complaint with the [http://www.gaip.cat/es/inici/ Commission for the Guarantee of the Right of Access to Public Information (GAIP)]. The public entity in charge of granting the information answered this request, stating that compiling this information involved more work than they had foreseen. This included not only retrieving the vast amount of cases which existed within the time-frame given by the claimant, but also digitising files and obscuring any personal data contained in them. In order to address this claim, the GAIP asked the Catalan DPA (APDCAT) to issue a report regarding what personal data could be included within the information requested by the journalist on these matters. = The APDCAT cited that these requests were subject to specific regulation by the [https://www.boe.es/buscar/act.php?id=BOE-A-2006-13010 “Spanish law regulating rights of access to information, public participation and access to justice in environmental matters (Ley 27/2006, de 18 de julio, por la que se regulan los derechos de acceso a la información, de participación pública y de acceso a la justicia en materia de medio ambiente - LAIA)"] and its definition of “environmental information”. According to this law, the information requested is relevant to the public interest and should be accessible to any person requesting it. The APDCAT states, however, that this right of access to environmental information is not absolute and is subject to exceptions, which include GDPR. Hence data protection rights must be weighed against access of information rights as well as public interest considerations. = One on hand, the APDCAT stated that under Article 2 GDPR, Article 4(1) GDPR and Recital 14 GDPR, any information regarding admi

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case IAI 68/2021 - IAI 71/2021 in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

4 November 2021

Authority

DPA APDCAT

GDPRhub ID

gdprhub-4460

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case IAI 68/2021 - IAI 71/2021 - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: