Attorney – €1,200 Fine (Spain, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An attorney in Spain was fined for processing a person's data without a proper legal reason. This matters because it shows that even small professionals must follow data protection rules. The fine was reduced after the attorney admitted responsibility and paid quickly.
What happened
The Spanish DPA fined an attorney for processing a person's data without sufficient legal basis.
Who was affected
The affected person was a client whose personal data was processed by the attorney.
What the authority found
The DPA found that the attorney lacked a valid legal basis for processing the personal data, violating GDPR requirements.
Why this matters
This case highlights the importance of having a valid reason for processing personal data. Small business owners should ensure they understand and comply with data protection laws to avoid penalties.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA imposed a fine on an attorney. The controller processed data of a data subject without sufficient legal basis. The original fine of EUR 2,000 was reduced to EUR 1,200 due to immediate payment and admission of responsibility by the controller.
Related Enforcement Actions (2)
Other enforcement actions involving Attorney in ES
Fine
€1K
Details
Fine Date
22 May 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,200
Enforcement Tracker ID
ETid-2624
About this data
Cite as: Cookie Fines. Attorney - Spain (2025). Retrieved from cookiefines.eu
Last updated: