Colegio Arenales Carabanchel
€3K($3K USD)final
Date Issued
2020-02-14
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The Spanish Data Protection Authority explained that the school had transferred pictures of students to third parties who then posted those pictures online.
Articles Violated
Art. 6 GDPR