- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Owner of a Law Firm – €600 Fine (Spain, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Spanish data protection authority fined the owner of a law firm for sending personal information in an external email without proper security measures. The fine was reduced after the owner admitted responsibility and paid promptly. This case underscores the need for businesses to implement strong data protection practices.
What happened
The owner of a law firm was fined for disclosing personal information in an external email due to insufficient security measures.
Who was affected
Clients whose personal information was improperly disclosed by the law firm owner.
What the authority found
The Spanish data protection authority found that the law firm owner failed to implement adequate technical and organizational measures to protect personal data.
Why this matters
This case serves as a reminder for small business owners to prioritize data security and ensure that personal information is handled carefully to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 17 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA imposed a fine on the owner of a law firm. The controller disclosed personal information in an external email because they did not implement sufficient technical and organizational measures. The original fine of EUR 1,000 was reduced to EUR 600 due to immediate payment and admission of responsibility by the controller.
Related Enforcement Actions (0)
No other enforcement actions found for Owner of a Law Firm in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 April 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€600
About this data
Cite as: Cookie Fines. Owner of a Law Firm - Spain (2025). Retrieved from cookiefines.eu
Last updated: