- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Sociedad Vascongada de Publicaciones, S.A. – €90,000 Fine (Spain, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Sociedad Vascongada de Publicaciones, S.A. was fined for publishing a video that included personal information of 56 women who were victims of gender-based violence. The Spanish DPA found that the company violated data minimization rules by sharing this sensitive information. This case highlights the importance of protecting personal data, especially for vulnerable individuals.
What happened
Sociedad Vascongada de Publicaciones, S.A. published a video containing personal data of 56 women identified as victims of gender-based violence.
Who was affected
The women whose personal data was published in the video were the individuals affected.
What the authority found
The DPA ruled that the company violated the principle of data minimization under GDPR by sharing unnecessary personal data.
Why this matters
This ruling emphasizes the need for companies to carefully consider the information they publish, especially regarding sensitive data. It serves as a reminder that sharing personal details can have serious privacy implications.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: articles corrected, national law identified, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine on Sociedad Vascongada de Publicaciones, S.A.. The controller had published a video on its news site that included an Excel spreadsheet with personal data (first and last names) of 56 women who were identified as victims of gender-based violence. During its investigation, the DPA determined that the rape victim's right to privacy outweighed the controller's freedom of information. For this reason, the DPA found that the controller violated the principle of data minimization. The original fine of EUR 150,000 was reduced to EUR 90,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Sociedad Vascongada de Publicaciones, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 June 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€90,000
About this data
Cite as: Cookie Fines. Sociedad Vascongada de Publicaciones, S.A. - Spain (2023). Retrieved from cookiefines.eu
Last updated: