DPA APDCAT
Data protection authority of Spain
Total Actions
5
Total Fines
€35K
Average Fine
€12K
Among actions with fines
Enforcement Factor
1.50
Moderately active
About DPA APDCAT
The DPA APDCAT is Spain's data protection authority and an active enforcer of GDPR and data-protection requirements. DPA APDCAT has taken 5 enforcement actions resulting in €34,600 in total penalties, with an average fine of €12K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.5), combining deterrent fines with corrective orders. Its most significant action was a €31,000 fine against Fundació Universitat Oberta de Catalunya (FUOC) in 2024. The most frequently cited legal basis in DPA APDCAT's decisions is Art. 5(1)(f) GDPR and Art. 5(1)(c) GDPR.
Largest Fines by DPA APDCAT
View all actionsRecent Actions by DPA APDCAT
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2021 | 1 | €0 |
| 2024 | 2 | €34K |
| 2025 | 1 | €600 |
| 2026 | 1 | €0 |
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and data-protection actions has DPA APDCAT issued?
DPA APDCAT has issued 5 enforcement actions related to GDPR and data-protection, totaling €35K.
What is DPA APDCAT's largest GDPR and data-protection fine?
The largest was a €31K fine against Fundació Universitat Oberta de Catalunya (FUOC) on 2024-03-21.