Associació Catalana per la Participació Política – Complaint Upheld (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish organization failed to respond to a person's request to delete their personal data, violating their privacy rights. This matters because it shows that organizations must respect individuals' rights to control their personal information. The case serves as a warning that ignoring such requests can lead to enforcement actions.
What happened
The organization did not respond to a request to delete personal data, violating the individual's right to erasure.
Who was affected
The affected individual was someone who requested the deletion of their personal data.
What the authority found
The Spanish DPA upheld the complaint, stating the organization violated GDPR by not responding to the deletion request.
Why this matters
This case highlights the obligation of organizations to promptly address data deletion requests under GDPR. It serves as a reminder that failing to comply with such requests can result in regulatory scrutiny and potential sanctions.
GDPR Articles Cited
National Law Articles
The complainant exercised a right of deletion against the respondent, but his request has not received the legally established response. The AEPD admitted the complaint for processing and granted the respondent entity the option to present allegations within fifteen days. The respondent did not reply to the AEPD and did not prove that it had responded to the claimant's request for deletion. Is the lack of response an infringement of the data subject's right to erasure (Article 17 GDPR)? The AEPD upheld the complaint and urged the respondent to reply to the complainant within ten working days, stating whether it had complied with the right of erasure or whether it had refused the request for erasure, stating its reasons. In the event of non-compliance, the AEPD considers that this could lead to a sanction, in accordance with article 58(2) GDPR.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Associació Catalana per la Participació Política in ES
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Associació Catalana per la Participació Política - Spain (2021). Retrieved from cookiefines.eu
Last updated: