{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00380-2024","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00380-2024)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-25","fingerprint":"ewai:shared:c790ea","proof":"sha256:afa7e9b78bc742fa389de524bc96a91e144f065cb976cc7c443cfb6958a560fe","jurisdiction":"shared","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","schema_version":1,"id":"enforcement:es:aepd:ps-00380-2024","country":"es","authority":"aepd","case_ref":"PS-00380-2024","decision_type":"sanction","topic":"privacy","impact":"low","impact_basis":"decision_type:sanction","classification_rules":"v1","decided":"2024-10-16","entity":"not_in_register","act":"regulation-2016-679-eu","articles":["art-6"],"amount":"not_in_register","currency":"not_in_register","summary":"PS-00380-2024: RESUELVE: PRIMERO: DECLARAR la terminación del procedimiento EXP202315853, de conformidad con lo establecido en el artículo 85 de la LPACAP. SEGUNDO: ORDENAR a IBERCAJA BANCO, S.A. para que en el plazo de 6 meses desde que la presente resolución sea firme y ejecutiva, notifique a la Agencia la adopción de las medidas que se describen en los fundamentos de derecho del Acuerdo de inicio transcrito en la presente resolución. TERCERO:","source_url":"https://www.aepd.es/documento/ps-00380-2024.pdf","read_at":"2026-10-10T10:56:04.853007+00:00","sha256":"327001fdd3df584926285ceb6d8a2373d5e5921ffb14d4717127834ebc341b82","url":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00380-2024","source":"NovaCopilot","risk_objects":"https://legal.exploreworldai.com/api/public/v1/risk-objects?topic=privacy&country=es","chain":{"rules":"v1","source":"NovaCopilot","status":"linked","decision_id":"enforcement:es:aepd:ps-00380-2024","breached_articles":[6],"obligations":[{"obligation_id":"obligation:eu:gdpr-art-6-controller","article":"6","role":"controller","duty":"Process personal data only where at least one legal basis in Article 6(1) applies.","sha256":"88d96d6d13e8fa7a1d299d74db0a1f7d34c66bdd9917157fbc416e2ae7f92313","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-6-controller"}],"unlinked_articles":[],"sanctions":[{"sanction_id":"sanction:eu:gdpr-art-83-5","article":"83(5)","max_amount":"EUR 20 000 000","max_turnover_pct":4,"sha256":"f0b01e602fcb61aa65f52bb1beeb2f29ae0e2f70162dc508d3906fc9973ee2f0"}],"fine":{"amount_eur":"not_in_register","fixed_cap_eur":20000000,"share_of_fixed_cap":"not_in_register","turnover_cap":"requires_entity_turnover"},"chain_hash":"e52cc13f0b5a0be686467fc888e1647f71531e39dd4024da3fb49afa53aa2808","chain_formula":"chain_n = SHA-256(chain_{n-1}|n|kind|id|sha256), genesis 64x0, order decision, obligations, sanctions"},"hash":"sha256:afa7e9b78bc742fa389de524bc96a91e144f065cb976cc7c443cfb6958a560fe","version":"legal-2026-10-25","expires":"2026-10-26T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-25+legal-2026-10-25+2026-10-25T12:13:04","content_hash":"sha256:afa7e9b78bc742fa389de524bc96a91e144f065cb976cc7c443cfb6958a560fe","revalidate_after":"2026-10-25T14:41:52.962Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00380-2024","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00380-2024","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"}}