Sanction RGPD Spanish Data Protection Authority (aepd) — Aena, S.M.E., S.A. : 10,0 M€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Aena, S.M.E., S.A.
- Montant de l'amende
- 10,0 M€
- Date de la décision
- 6 novembre 2025
- Fondement juridique
- Art. 35
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 10,043,002 on Aena, S.M.E., S.A. The controller conducted a pilot project involving multiple airports, including the use of facial recognition systems. However, the controller failed to carry out a data protection impact assessment prior to doing so.