Enforcing jurisdiction: Spain · Geography does not establish applicable law.
Confirmed applicable legislation: EU General Data Protection Regulation
Privacy topics: Lawfulness & transparency

Unknown – €2,000 Fine (Spain, 2023)

€2,000

Agencia Española de Protección de Datos

16 June 2023

Spain

final

Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Spanish DPA fined an unknown company for not giving people enough information to exercise their right to object. This matters because it highlights the importance of transparency in how companies handle personal data. Businesses must ensure they inform users properly about their rights.

What happened

An unknown company failed to provide sufficient information to users about their right to object to data processing.

Who was affected

Individuals whose rights to object to data processing were not adequately informed by the company.

What the authority found

The DPA ruled that the company did not meet its obligation to inform users, violating Article 13 of GDPR.

Why this matters

This case emphasizes the need for businesses to communicate clearly with users about their data rights. Companies should review their privacy notices to ensure compliance.

Recorded legal citations

Automatically processed

Art. 13 GDPR

View original scraped data

Art. 13(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcement Agencia Española de Protección de Datos actions All Unknown actions

Full Legal Summary

Detailed

The Spanish DPA has imposed a fine of EUR 2,000 on a controller for failing to provide data subjects with sufficient information to exercise their right to object.

Show full summary

Related Enforcement Actions (8)

Other enforcement actions involving Unknown in ES

Fine

Dec 2020· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of 10,000 EUR on a company for violating Art. 5 GDPR. The company sent an e-mail to a third party with the dismi...

€10K

Fine

Mar 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 9,000 on a website operator. The controller had published photos of the data subject on its website witho...

€9K

Fine

Sept 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on a company. The company had requested various personal data from customers for appointment bo...

€3K

Fine

Nov 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on a company. The company had requested various personal data from customers for appointment bo...

€3K

Fine

Jan 2023· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on a data controller. The data controller had failed to provide a notice with information about video surveillance ...

€180

Fine

Jan 2023· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on a data controller. The data controller had failed to provide a notice with information about video surveillance ...

€180

Current

Jun 2023

Fine

€2K

Fine

Apr 2025· Agencia Española de Protección de Datos

The Spanish DPA imposed a fine on an unknown data controller. The controller stored full copies of personal IDs for verification purposes. In this cas...

€600

Fine

Mar 2026· Agencia Española de Protección de Datos

Non-compliance with general data processing principles

€1K