{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00165-2025","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00165-2025)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:shared:f02882","proof":"sha256:effb606020d5a5374d1b022bdc325f5aad64e7d3bd8aff8e3bc6ffe126abf3b6","jurisdiction":"shared","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","schema_version":1,"id":"enforcement:es:aepd:ps-00165-2025","country":"es","authority":"aepd","case_ref":"PS-00165-2025","decision_type":"gdpr_fine","topic":"privacy","impact":"low","impact_basis":"amount_eur_band:privacy","classification_rules":"v1","decided":"2025-10-03","entity":"not_in_register","act":"regulation-2016-679-eu","articles":["art-6","art-9","art-14","art-32"],"amount":18600,"currency":"EUR","summary":"PS-00165-2025: RESUELVE: PRIMERO: DECLARAR la comisión de las infracciones y CONFIRMAR las sanciones determinadas en la parte dispositiva del acuerdo de inicio transcrito en la presente resolución. La suma de las citadas cuantías arroja una cantidad total 31.000,00 euros. C/ Jorge Juan, 6 28001 – Madrid www.aepd.es sedeaepd.gob.es 64/64 Tras haber procedido A.A.A. al pronto pago y reconocimiento de responsabilidad, se procede, en virtud del artículo 85 de la LPACAP, a la reducción de un 40% del total mencionado, lo cual supone la","source_url":"https://www.aepd.es/documento/ps-00165-2025.pdf","read_at":"2026-10-10T10:55:14.009963+00:00","sha256":"9352dbdf8e61c5dc221fa16c7f427123d5a41a472f3d4b2e36ab7975942a3c69","url":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00165-2025","source":"NovaCopilot","risk_objects":"https://legal.exploreworldai.com/api/public/v1/risk-objects?topic=privacy&country=es","chain":{"rules":"v1","source":"NovaCopilot","status":"linked","decision_id":"enforcement:es:aepd:ps-00165-2025","breached_articles":[6,9,14,32],"obligations":[{"obligation_id":"obligation:eu:gdpr-art-32-controller","article":"32","role":"controller","duty":"Ensure a level of security appropriate to the risk.","sha256":"aff26c82498547acdfb6176ccae2f04afb8918fb731bdcefdf8bfd54109a224f","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-32-controller"},{"obligation_id":"obligation:eu:gdpr-art-32-processor","article":"32","role":"processor","duty":"Ensure a level of security appropriate to the risk.","sha256":"f3fb4c8358fb508e20f6055217e9bbd0d1882b9ab3a04399e5ef5d64f8937399","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-32-processor"},{"obligation_id":"obligation:eu:gdpr-art-6-controller","article":"6","role":"controller","duty":"Process personal data only where at least one legal basis in Article 6(1) applies.","sha256":"88d96d6d13e8fa7a1d299d74db0a1f7d34c66bdd9917157fbc416e2ae7f92313","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-6-controller"},{"obligation_id":"obligation:eu:gdpr-art-9-controller","article":"9","role":"controller","duty":"Do not process special categories of personal data unless an exception in Article 9(2) applies.","sha256":"10db04e22ee39c12aad3cfe51f923c8d94a42795689790f8eb93ed57e5daa176","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-9-controller"},{"obligation_id":"obligation:eu:gdpr-art-14-controller","article":"14","role":"controller","duty":"Give the data subject the information listed in Article 14 where personal data have not been obtained from the data subject, including the source of the data.","sha256":"f23622f1891cf7dd80201e81b598fc85904208847197742799e20bb82de0b285","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-14-controller"}],"unlinked_articles":[],"sanctions":[{"sanction_id":"sanction:eu:gdpr-art-83-4","article":"83(4)","max_amount":"EUR 10 000 000","max_turnover_pct":2,"sha256":"02ac09ae66b44afcfc74bc418e4d1bdfaa9565aa4c55640e517c0d8dcb3864a4"},{"sanction_id":"sanction:eu:gdpr-art-83-5","article":"83(5)","max_amount":"EUR 20 000 000","max_turnover_pct":4,"sha256":"f0b01e602fcb61aa65f52bb1beeb2f29ae0e2f70162dc508d3906fc9973ee2f0"}],"fine":{"amount_eur":18600,"fixed_cap_eur":20000000,"share_of_fixed_cap":0.0009,"turnover_cap":"requires_entity_turnover"},"chain_hash":"44817076795696103276b34c4b07d4c71b5cc7f73ccafd8c742f0d11f143330c","chain_formula":"chain_n = SHA-256(chain_{n-1}|n|kind|id|sha256), genesis 64x0, order decision, obligations, sanctions"},"hash":"sha256:effb606020d5a5374d1b022bdc325f5aad64e7d3bd8aff8e3bc6ffe126abf3b6","version":"legal-2026-11-03","expires":"2026-11-03T12:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T07:33:32","content_hash":"sha256:effb606020d5a5374d1b022bdc325f5aad64e7d3bd8aff8e3bc6ffe126abf3b6","revalidate_after":"2026-11-03T08:47:32.156Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00165-2025","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","freshness":{"freshness_class":"live","as_of":"2026-11-03T07:47:32.156Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00165-2025","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1826}}