[CLSTR]
< Back to situation

[REVISION HISTORY]

Spain Data Protection Agency enforcement

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-07-30 04:42 UTC → 2026-08-01 22:22 UTC · added removed

In early July 2026 the Spanish Data Protection Agency (AEPD) AEPD announced it would fine companies fines up to €100,000 for unauthorized copying personal identification documents, signaling a crackdown on mishandling of sensitive data. personal ID documents. Later in July, the agency that month it opened a sanctioning procedure against the Catalan news outlet La Directa, proposing a €7,000 fine for publishing penalty and ordering the removal or pixelation of faces, names and fabricated identifiers of four National Police agents alleged to have infiltrated Catalan independence movements. The outlet officers it had identified as infiltrators. La Directa, journalists and civil‑society groups condemned the measure move as intimidation that threatens investigative journalism, while reporting, citing European human‑rights jurisprudence. On 29 July the agency reiterated the demand that La Directa erase the identifying material, noting parallels with a UK case where authorities later apologized for similar disclosures. On 1 August the AEPD defended formalised the €7,000 fine against La Directa and extended an identical sanction as to the digital news site VilaWeb after it published a fictitious undercover name, a photograph of an infiltrator’s face and other personal data. VilaWeb’s director warned that such enforcement could compel public officials to demand removal of data‑privacy rules. Together, the two factual reporting, fostering self‑censorship. These actions illustrate the AEPD’s broader effort in 2026 strategy of applying monetary penalties to enforce data‑protection regulations across both commercial entities firms and media organizations, applying monetary penalties organisations for breaches that range ranging from unauthorized illegal ID duplication to alleged misuse of personal identifiers in reporting. journalism.

Versions

  1. 2026-08-01 22:22 UTC Spain Data Protection Agency enforcement
  2. 2026-07-30 04:42 UTC Spain Data Protection Agency enforcement

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.