Data Protection Compliance In Spain

Spain has one of the most restrictive data protection regimes in the European Union (EU) and is also known to have some of the highest penalties (fines are up to � 600,000 per infringement). The Spanish Data Protection Agency (AEPD) has a reputation for being one of the fiercest of the EU and the penalties are not just on paper, in the last years, it has imposed fines of � 450,000, � 900,000 and � 1,400,000. The purpose of this article is to help companies operating in Spain to better understand how to meet the Spanish data protection requirements and not end up incurring the wrath of the data protection authority.