Eurocollege Oxford English Institute S.L. – €72,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Eurocollege Oxford English Institute S.L. was fined €72,000 for asking students for unnecessary personal health information before enrollment. This case shows that companies must only collect data that is truly needed. It serves as a warning to educational institutions about the importance of data protection compliance.
What happened
Eurocollege Oxford English Institute S.L. was fined for requiring unnecessary personal health information from students.
Who was affected
A student who was required to provide personal health information before enrolling.
What the authority found
The Spanish DPA found that the school had no valid legal basis to process the requested personal health data.
Why this matters
This case highlights the need for educational institutions to review their data collection practices. Companies should ensure they only collect data that is necessary to avoid penalties.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 72,000 on Eurocollege Oxford English Institute S.L. The data subject stated that they had signed a training contract with the affiliated school Centro De Estudios Aeronauticos, S.L. (CEAE). Prior to enrolment, CEAE required the complainant to undergo a medical examination with the presentation of a medical certificate, complete a health declaration with personal health information and present a police clearance certificate. However, during its investigation, the DPA found that the personal information requested by CEAE was neither necessary nor required by law. The controller therefore had no valid legal basis to process the requested data.
Related Enforcement Actions (0)
No other enforcement actions found for Eurocollege Oxford English Institute S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
17 November 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€72,000
Enforcement Tracker ID
ETid-2133
About this data
Cite as: Cookie Fines. Eurocollege Oxford English Institute S.L. - Spain (2023). Retrieved from cookiefines.eu
Last updated: