Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

JAÉN SENTIDO Y COMÚN – €2,000 Fine (Spain, 2022)

€2,000Agencia Española de Protección de Datos4 August 2022Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

JAÉN SENTIDO Y COMÚN was fined €2,000 for sending an email to 241 recipients in a way that exposed all their email addresses to each other. This breach of privacy is a reminder that businesses must handle personal data carefully to protect individuals' information.

What happened

JAÉN SENTIDO Y COMÚN sent an email to multiple recipients without using blind carbon copy (BCC), revealing their addresses.

Who was affected

241 individuals who received the email were affected as their email addresses were visible to all other recipients.

What the authority found

The Spanish data protection authority ruled that the company violated GDPR by failing to protect the recipients' personal data.

Why this matters

This case highlights the importance of using proper email practices to safeguard personal information. Businesses should always consider privacy when communicating with customers.

Recorded legal citations
Automatically processed
Art. 5(1)(f) GDPR
Art. 32(1) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 32(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 2,000 on JAÉN SENTIDO Y COMÚN. The controller had sent an e-mail to 241 people in an open distribution list, making the email addresses of all recipients visible to the other recipients.

Related Enforcement Actions (0)

No other enforcement actions found for JAÉN SENTIDO Y COMÚN in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

4 August 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€2,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. JAÉN SENTIDO Y COMÚN - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: