Spain: AEPD fines COLEGIO ARENALES CARABANCHEL €3,000 for GDPR violation
The Spanish data protection authority ('AEPD') issued, on 14 February 2020, a resolution ('the Resolution') in proceeding No. PS/00466/2019, fining COLEGIO ARENALES CARABANCHEL €3,000 for violating Article 6(1)(a) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the Resolution outlines that COLEGIO ARENALES CARABANCHEL transferred pictures of the claimant's children to third parties which it published without lawful consent.
You can read the Resolution, only available in Spanish, here.