- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Corporación de Medios de Extremadura – €90,000 Fine (Spain, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Corporación de Medios de Extremadura was fined for publishing a video that included personal data of 56 women who were victims of gender-based violence. The Spanish DPA ruled that the company violated data minimization principles by sharing this sensitive information. This case underscores the critical need for media outlets to protect individuals' privacy rights.
What happened
Corporación de Medios de Extremadura published a video containing personal data of 56 women identified as victims of gender-based violence.
Who was affected
The women whose personal data was published in the video were the individuals affected.
What the authority found
The DPA ruled that the company violated the principle of data minimization under GDPR by sharing unnecessary personal data.
Why this matters
This ruling serves as a reminder for media organizations to prioritize privacy, especially when dealing with sensitive information about vulnerable individuals.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine on Corporación de Medios de Extremadura. The controller had published a video on its news site that included an Excel spreadsheet with personal data (first and last names) of 56 women who were identified as victims of gender-based violence. During its investigation, the DPA determined that the rape victim's right to privacy outweighed the controller's freedom of information. For this reason, the DPA found that the controller violated the principle of data minimization. The original fine of EUR 150,000 was reduced to EUR 90,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Corporación de Medios de Extremadura in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 June 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€90,000
About this data
Cite as: Cookie Fines. Corporación de Medios de Extremadura - Spain (2023). Retrieved from cookiefines.eu
Last updated: