Posts

Fingerprint time tracking reader at a company entrance

Fingerprint time tracking in 2026: annulling the AEPD guidance did not make it legal

Spain's National Court annulled the AEPD biometrics guidance in June 2026. The instrument fell, not the rule: what your company must prove before keeping a fingerprint reader.

Cookie Dark Patterns: When Consent Is Not Valid

What cookie dark patterns are, why they may invalidate consent and a practical checklist for cookie banners.

Subsidised Training Fraud in Spain: How to Detect It

How to detect fraud in subsidised training courses in Spain, what evidence to keep and what to review before applying rebates.
Datos de salud de empleados y confidencialidad en la empresa

Employee Health Data: How to Process It Under the GDPR

How to process employee health data: what the company may know, common mistakes, confidentiality, minimisation and AEPD guidance.
Delegado Protección de Datos

Data Protection Officer: When Appointing a DPO Is Mandatory

When appointing a Data Protection Officer is mandatory, DPO functions, common mistakes and official AEPD, EDPB and LOPDGDD sources.
WhatsApp group and GDPR fine for adding someone without consent.

Fine for adding someone to a WhatsApp group without consent

The AEPD fined a sports club 4,000 euros for adding a former user to WhatsApp groups without consent. GDPR lessons for companies.
Galleta de chocolate apoyada sobre el teclado de un ordenador portátil

AEPD Cookie Guide: Key Changes for Websites

AEPD Cookie Guide: accept, reject, configure, non-essential cookies, misleading patterns and adaptation deadline for websites.
Hombre con camisa blanca hablando por el teléfono móvil en la calle

Is the end of spam calls?

What does the General Telecommunications Law ("LGT") say about "spam" calls? Is the end of spam calls? The General Communications Law ("LGT") was published on 28 June 2022. In its article 66.1.b) it mentions that end users of interpersonal…
Salón de una vivienda con el testigo rojo de grabación REC en la pared

Property agency fined for exposing images of minors

The fine imposed on a property agency for exposing images of minors has highlighted the importance of protecting the rights of minors. An individual filed a complaint with the Spanish Data Protection Agency, with the aim of highlighting the…

Face recognition in exams: Is it proportionate?

The Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades) has sanctioned the Universitat Oberta de Catalunya for collecting biometric data from its students through face recognition, in order to verify that they were…