{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00288-2024",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00288-2024)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-13",
    "fingerprint": "ewai:shared:51f866",
    "proof": "sha256:2edba1199acf5ff69144fa802dd0a540027b1228a7d7f3f69ffb1642a4b49e6a",
    "jurisdiction": "shared",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "schema_version": 1,
  "id": "enforcement:es:aepd:ps-00288-2024",
  "country": "es",
  "authority": "aepd",
  "case_ref": "PS-00288-2024",
  "decision_type": "sanction",
  "topic": "privacy",
  "impact": "low",
  "impact_basis": "decision_type:sanction",
  "classification_rules": "v1",
  "decided": "2025-07-31",
  "entity": "not_in_register",
  "act": "regulation-2016-679-eu",
  "articles": [
    "art-6",
    "art-9",
    "art-25"
  ],
  "amount": "not_in_register",
  "currency": "not_in_register",
  "summary": "PS-00288-2024: RESUELVE: PRIMERO: IMPONER a IDCQ HOSPITALES Y SANIDAD, S.L.U., con NIF B87324844, - por la infracción del artículo 9 del RGPD, en relación con el caso concreto, tipificada conforme a lo dispuesto en el artículo 83.5 del RGPD, calificada como muy grave a efectos de prescripción, en el artículo 72.1 e) de la LOPDGDD, una multa administrativa de cuantía: 100.000,00 euros. - por la infracción del artículo 6 del RGPD, en relación con el caso concreto, tipificada conforme a lo dispuesto en el artículo 83.5 del RGPD, cal",
  "source_url": "https://www.aepd.es/documento/ps-00288-2024.pdf",
  "read_at": "2026-10-10T10:55:41.316191+00:00",
  "sha256": "3ed60f0b29ad647118325778dded7151993ada217ac78a615b62340f9a882843",
  "url": "https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00288-2024",
  "source": "NovaCopilot",
  "risk_objects": "https://legal.exploreworldai.com/api/public/v1/risk-objects?topic=privacy&country=es",
  "chain": {
    "rules": "v1",
    "source": "NovaCopilot",
    "status": "linked",
    "decision_id": "enforcement:es:aepd:ps-00288-2024",
    "breached_articles": [
      6,
      9,
      25
    ],
    "obligations": [
      {
        "obligation_id": "obligation:eu:gdpr-art-25-controller",
        "article": "25",
        "role": "controller",
        "duty": "Apply data protection by design and by default.",
        "sha256": "02861b9b67c914fd1c7ffe029d53774e8ed387c6ee3898f8ba574c8771f4b6f3",
        "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-25-controller"
      },
      {
        "obligation_id": "obligation:eu:gdpr-art-6-controller",
        "article": "6",
        "role": "controller",
        "duty": "Process personal data only where at least one legal basis in Article 6(1) applies.",
        "sha256": "88d96d6d13e8fa7a1d299d74db0a1f7d34c66bdd9917157fbc416e2ae7f92313",
        "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-6-controller"
      },
      {
        "obligation_id": "obligation:eu:gdpr-art-9-controller",
        "article": "9",
        "role": "controller",
        "duty": "Do not process special categories of personal data unless an exception in Article 9(2) applies.",
        "sha256": "10db04e22ee39c12aad3cfe51f923c8d94a42795689790f8eb93ed57e5daa176",
        "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-9-controller"
      }
    ],
    "unlinked_articles": [],
    "sanctions": [
      {
        "sanction_id": "sanction:eu:gdpr-art-83-4",
        "article": "83(4)",
        "max_amount": "EUR 10 000 000",
        "max_turnover_pct": 2,
        "sha256": "02ac09ae66b44afcfc74bc418e4d1bdfaa9565aa4c55640e517c0d8dcb3864a4"
      },
      {
        "sanction_id": "sanction:eu:gdpr-art-83-5",
        "article": "83(5)",
        "max_amount": "EUR 20 000 000",
        "max_turnover_pct": 4,
        "sha256": "f0b01e602fcb61aa65f52bb1beeb2f29ae0e2f70162dc508d3906fc9973ee2f0"
      }
    ],
    "fine": {
      "amount_eur": "not_in_register",
      "fixed_cap_eur": 20000000,
      "share_of_fixed_cap": "not_in_register",
      "turnover_cap": "requires_entity_turnover"
    },
    "chain_hash": "f198a232539c549c36271b6d5d42c91998a9ad0b5a1120d82c5917611acae3fa",
    "chain_formula": "chain_n = SHA-256(chain_{n-1}|n|kind|id|sha256), genesis 64x0, order decision, obligations, sanctions"
  },
  "hash": "sha256:2edba1199acf5ff69144fa802dd0a540027b1228a7d7f3f69ffb1642a4b49e6a",
  "version": "legal-2026-10-13",
  "expires": "2026-10-14T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-13+legal-2026-10-13+2026-10-13T15:58:55",
    "content_hash": "sha256:2edba1199acf5ff69144fa802dd0a540027b1228a7d7f3f69ffb1642a4b49e6a",
    "revalidate_after": "2026-10-13T17:03:48.166Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00288-2024",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}