Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM – €3,600 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Spanish data protection authority fined the Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha for mishandling personal medical data. They processed Covid-19 test results without consent and didn't inform participants about how long their data would be kept. This case highlights the importance of getting consent and being transparent about data use.
What happened
The Federation processed Covid-19 antigen test results of sports participants without their consent.
Who was affected
Participants in sports competitions who had their medical data processed without consent.
What the authority found
The authority found that the Federation lacked a valid legal basis for processing medical data and failed to inform participants about data retention, violating GDPR rules.
Why this matters
This case underscores the need for organizations to obtain explicit consent when handling sensitive health data and to clearly communicate data retention policies. It serves as a reminder for sports organizations to review their data practices to ensure compliance.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has fined the Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM. The controller processed medical data from Covid-19 antigen tests of participants in sports competitions without their consent to the processing. In addition, the DPA found that the controller failed to inform the data subjects of the data retention period. The original fine of EUR 6,000 was reduced to EUR 3,600 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 December 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,600
About this data
Cite as: Cookie Fines. Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM - Spain (2022). Retrieved from cookiefines.eu
Last updated: