Sanction RGPD Spanish Data Protection Authority (aepd) — Website operator : 9 k€ (2021)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Website operator
- Montant de l'amende
- 9 k€
- Date de la décision
- 13 septembre 2021
- Fondement juridique
- Art. 6, Art. 13
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA (AEPD) has imposed a fine of EUR 9,000 on the controller of a website. A person had filed a complaint with the DPA due to the fact that the controller had published his first and last name as well as a screenshot of his Linkedin profile on his website. The controller had neither obtained the data subject's consent for this, nor had he informed him about the processing of his personal data. The DPA considered this to be a violation of Art. 6 GDPR and Art. 13 GDPR.