Homeowners Association – €2,000 Fine (Spain, 2022)

€2,000Agencia Española de Protección de Datos28 December 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A homeowners association in Spain was fined EUR 2,000 for adding a cleaner to a WhatsApp group without their consent and not responding to their data access request in time. This matters because it shows that even small groups need to respect privacy laws and handle personal data properly.

What happened

The association added a cleaner to a WhatsApp group without their consent and delayed responding to their data access request.

Who was affected

The cleaner who worked in the residential complex and was added to the WhatsApp group without permission.

What the authority found

The Spanish DPA found that the association unlawfully added the cleaner's phone number to a WhatsApp group and failed to respond to their data access request promptly, violating GDPR.

Why this matters

This case highlights the importance of obtaining consent before adding someone to communication groups and responding to data access requests promptly. Small organizations should ensure they comply with privacy laws to avoid fines.

GDPR Articles Cited

Art. 15(GDPR)
Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 2,000 on a homeowners' association. An individual who did cleaning work in the residential complex had filed a complaint with the DPA because members of the association had added them to a WhatsApp group without their consent. The data subject was required to upload pictures of the cleaning they had done for documentation purposes. The DPA concluded that adding their phone number to the WhatsApp group without their consent violated Art. 6 GDPR and was therefore unlawful. The DPA also found that the controller had not complied with the data subject's request for access to personal data in a timely manner, therefore violating Art. 15 GDPR.

Related Enforcement Actions (14)

Other enforcement actions involving Homeowners Association in ES

Current
Dec 2022

Fine

€2K

Details

Fine Date

28 December 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€2,000

Enforcement Tracker ID

ETid-1585

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Homeowners Association - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: