On September 11, AEPD issued (source document in Spanish) a final decision against a social media company in connection with its data processing activities and issued a fine of €1.2 million. According to the AEPD, the company collected user-processed special categories of data for advertising purposes without obtaining the data subjects' express consent.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.