The Spanish data protection authority ('AEPD') published, on 18 March 2022, its 2021 report which includes the activities carried out by the AEPD in different areas, an analysis of trends, and a statement of present and future challenges. In particular, the report outlines, among other things, that the AEPD launched the Digital Pact for the Protection of People, which is aimed at promoting citizen coexistence in the digital sphere, in addition to making data protection compatible with innovation, ethics, and business competitiveness. Furthermore, the report confirms that the AEPD received 13,905 complaints, which is an increase of 35% since the 2020 report.

Additionally, the report provides that the complaints received related to internet services (16%), video surveillance (12%), receipt of advertising, except spam (11%), among others, while the six areas of activity with the highest overall amount of fines were:

• advertising (€8,659,200);
• telecommunications (€6,500,000);
• financial entities/creditors (€6,243,000);
• default files (€4,209,000);
• fraudulent hiring (€3,674,000); and
• labour matters (€2,625,900).

Lastly, the report notes that the AEPD initiated 16 cross-border cases and has declared itself an interested authority in more than 300 of these.

You can read the press release here and the report here, both only available in Spanish.