Corporación de Medios de Extremadura – €90,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Corporación de Medios de Extremadura was fined €90,000 for publishing a video that revealed personal information about 56 women who were victims of violence. This case emphasizes the importance of protecting sensitive information, especially regarding vulnerable individuals.
What happened
The company published a video that included personal data of 56 women identified as victims of gender-based violence.
Who was affected
Women who were victims of gender-based violence and had their personal data disclosed in a public video.
What the authority found
The Spanish data protection authority found that the company violated the principle of data minimization by sharing unnecessary personal information.
Why this matters
This ruling underscores the need for media organizations to prioritize privacy over the right to information. It serves as a warning for businesses to be cautious about sharing sensitive data.
GDPR Articles Cited
The Spanish DPA has imposed a fine on Corporación de Medios de Extremadura. The controller had published a video on its news site that included an Excel spreadsheet with personal data (first and last names) of 56 women who were identified as victims of gender-based violence. During its investigation, the DPA determined that the rape victim's right to privacy outweighed the controller's freedom of information. For this reason, the DPA found that the controller violated the principle of data minimization. The original fine of EUR 150,000 was reduced to EUR 90,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Corporación de Medios de Extremadura in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 June 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€90,000
Enforcement Tracker ID
ETid-1917
About this data
Cite as: Cookie Fines. Corporación de Medios de Extremadura - Spain (2023). Retrieved from cookiefines.eu
Last updated: