Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [POLITICS]

3 clusters · 12 sources · 29 days · First seen about 1 month ago · Last updated 13 days ago

Spain Data Protection Agency enforcement

Overview

In early July 2026 the AEPD announced fines up to €100,000 for unauthorized copying of personal ID documents. Later that month it opened a sanctioning procedure against the Catalan outlet La Directa, proposing a €7,000 penalty and ordering the removal or pixelation of faces, names and fabricated identifiers of four National Police officers it had identified as infiltrators. La Directa, journalists and civil‑society groups condemned the move as intimidation that threatens investigative reporting, citing European human‑rights jurisprudence.

On 29 July the agency reiterated the demand that La Directa erase the identifying material, noting parallels with a UK case where authorities later apologized for similar disclosures. On 1 August the AEPD formalised the €7,000 fine against La Directa and extended an identical sanction to the digital news site VilaWeb after it published a fictitious undercover name, a photograph of an infiltrator’s face and other personal data. VilaWeb’s director warned that such enforcement could compel public officials to demand removal of factual reporting, fostering self‑censorship.

These actions illustrate the AEPD’s 2026 strategy of applying monetary penalties to both commercial firms and media organisations for breaches ranging from illegal ID duplication to alleged misuse of personal identifiers in journalism.

Entities

La Directa · Xavier Antich · Jesús Rodríguez · Sònia Olivella · Agencia Española de Protección de Datos

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

Coverage disagrees

Sources make claims that cannot both be true. CLSTR reports the disagreement; it does not decide who is right.

"The exposed agents were intelligence operatives, not subject to any specific legal coverage for privacy."

vs

"Four police agents filed a complaint with the AEPD alleging violation of their privacy."

One claim says four police agents filed a privacy complaint, while the other says the agents are not subject to any specific legal coverage for privacy, which cannot both be true.

[DISPUTED] Four police agents filed a complaint with the AEPD alleging violation of their privacy.
[DISPUTED] The exposed agents were intelligence operatives, not subject to any specific legal coverage for privacy.
[● 6 SOURCES] The AEPD proposed a €7,000 fine against La Directa for publishing personal data of police infiltrators.
[● 6 SOURCES] The AEPD requires La Directa to pixelate faces and remove names and any fabricated ID numbers of the agents.
[● 6 SOURCES] A similar case in the United Kingdom resulted in an apology and disclosure of the infiltrators’ data to affected parties.
[● 5 SOURCES] Journalists and civil‑rights figures, including Xavier Antich, Xavier Monge and Elisabet Borreda, publicly supported La Directa.
[● 5 SOURCES] Irídia’s Sònia Olivella argued that the AEPD’s decision conflicts with European Court of Human Rights rulings protecting journalists.

Timeline

13 days ago

[POLITICS] 2 sources
Spanish Data Protection Agency fines La Directa and VilaWeb over police infiltrator reporting
Spain's Data Protection Agency fined La Directa and VilaWeb €7,000 each for publishing police infiltrator identities, raising press‑freedom concerns.
15 days ago

[POLITICS] 10 sources
Spain's Data Protection Agency proposes €7,000 fine on La Directa
Spain's data‑protection agency seeks a €7,000 fine on La Directa for publishing identities of police infiltrators, demanding removal of the material and sparking press‑freedom protests.
about 1 month ago

[BUSINESS] 2 sources
Spain's Data Protection Agency fines firms up to €100,000 for copying IDs
Spain's data‑protection regulator fines firms up to €100,000 for copying the DNI, citing GDPR rules; penalties include €100,000 on Orange and €30,000 on hotels and a dental clinic.

Sources

assemblea.cat · ciencia.ara.cat · elnacional.cat · english.vilaweb.cat · hu.sports.yahoo.com · indianexpressgroup.com · jornalet.com · lahaine.org · llibertat.cat · meneame.net · nodo50.org · ppcc.lahaine.org

This summary has been updated 1 time: see revision history