Examples of some real sanctions imposed by the Spanish Data Protection Agency

[subornaakter20]

Sanctions for Google Spain
In 2013, news was reported through various media that Google had been sanctioned by the Spanish Data Protection Agency.

After several months of analysis, it was found that Google, in its various services, was collecting and using its users' information without making it entirely clear what the information was being used for.

Furthermore, the data was used without the user's knowledge, filtering it to segment content and advertising . For this reason, a fine of 900,000 euros was assigned.

The main reason for one of the sanctions is marketing list of plumbers due to the vulnerability in the protection of the data of people , users of Google services, so the ignorance on the part of the aforementioned company led to being fined.

Sanctions imposed on a bar in the capital
That same year, a bar in the capital was fined 6,500 euros under the Data Protection Act for installing video cameras on its premises without properly informing that they were being used for security reasons.

In addition, the registration in the file did not report the installation of video cameras, so he was fined, considering it a minor offense.

Groupon Sanctions
Groupon is considered a large company in its industry and due to the economic activity it is engaged in, it manages an extensive database.

Their mistake was that they stored their customers' credit card data and when they returned to buy again, the data was automatically filled in . But the worst part of the case was that the security code was also automatically saved.

Groupon was fined 20,000 euros for these two violations.

And what about the penalties of the LOPD ?
Previously, the highest fine was 600,000 euros, but now that amount has been imposed for minor offences.

Now, the sanctions that are classified as very serious will be assigned a fine of 10,000,000 euros, an amount that can undoubtedly ruin any growing business.

In addition, a further point has been added that the old law did not have, and that is that there is the possibility that companies may have to compensate users who have sued and have in some way been affected by the “poor handling of their data”.

The Data Protection Act is very extensive, however, here we try to summarize the most critical points, which due to the nature of your business could affect it.

However, we invite you to learn more about the subject and, above all, to get up to date before May 25, 2018, because it will be the deadline to allow websites to operate according to the old law.

Don't forget that you must emphasize the user's explicit and non-tacit consent for the processing of their data and that this can be verified.

We hope you found this content useful and are able to catch up with the new rules of the game.