- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Chamber of Commerce, Industry, Services and Navigation of Spain – €500,000 Fine (Spain, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Chamber of Commerce, Industry, Services and Navigation of Spain was fined for improperly sharing personal data of Spanish companies with the public. This ruling is significant because it underscores the need for organizations to handle sensitive data responsibly. Companies should be cautious about how they share data to prevent legal issues.
What happened
The Chamber of Commerce was fined for making personal data of Spanish companies publicly available without a valid legal basis.
Who was affected
Self-employed individuals and companies whose personal data was shared without proper consent.
What the authority found
The Spanish DPA ruled that the Chamber of Commerce violated GDPR by transferring personal data without a valid legal basis.
Why this matters
This ruling serves as a warning to organizations about the risks of mishandling personal data. Companies must ensure they have the right legal grounds before sharing any sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine of EUR 500,000 on the Chamber of Commerce, Industry, Services and Navigation of Spain. Due to its function within the Spanish Executive, the controller has access to the basic data of all Spanish companies, including information regarding solvency, contact details, tax numbers and more. Self-employed persons are also included. The controller has decided to make this information available to the public. For this purpose, the controller created the legal entity CAMERDATA S.A. (ETid: 2838), which acts as a data processor. The controller transferred the aforementioned data to the processor so that it could be distributed. However, the transfer was not based on a valid legal basis. The amount and kind of data transferred infringed the principles of data minimisation and confidentiality. Furthermore, the manner in which the data was transferred infringed the principle of fairness, and the controller failed to inform the data subjects regarding the data processing.
Related Enforcement Actions (0)
No other enforcement actions found for Chamber of Commerce, Industry, Services and Navigation of Spain in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 April 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€500,000
About this data
Cite as: Cookie Fines. Chamber of Commerce, Industry, Services and Navigation of Spain - Spain (2025). Retrieved from cookiefines.eu
Last updated: