News

Penalties for data protection breaches increase

data-protection
Featured News

 

The protection of personal data is becoming increasingly complex, especially since the approval of the General Data Protection Regulation (GDPR) in force since May 2018, in addition to the approval of the new Law on Data Protection and Guarantee of Digital Rights in December of the same year, the already existing Law on the Information Society and Electronic Commerce, and the European regulation project regarding the use of cookies.

Since 2018, the increase in the difficulty of processing personal data derived from new national and European legislations has led to an increase in sanctions for breach of data protection in Europe, particularly in Spain. The Spanish Data Protection Agency (AEPD) has intervened over 295 times, each with a corresponding sanction, making it one of the most active data protection agencies in the European Union.

According to data published on the agency’s own website, it is estimated that the AEPD has collected approximately 23,462,000 euros in the first eight months of 2021. The penalties

Imposed on Spanish businesses have affected all types of businesses, without size distinction, due to infringements ranging from non-notified data breaches to emails without a hidden copy. This is in part because, as a result of remote working, all companies have been forced to adapt their operations systems to this new reality but they have failed to adequately update established policies and procedures.

Internationally, a few countries are joining the implementation and/or updating of data protection laws. Among them are China, which has already passed its data protection law (Personal Data Protection Law -PIPL-), and Singapore, which has updated its Personal Data Protection Act (PDPA).

At UHY Fay & Co we have a team specialized in helping companies comply with the different regulations regarding the protection of personal data to reduce the chances of non-compliance with the different regulations. If your company has not yet managed to properly renew its data protection strategy, we will be happy to assist you.

Related Services

 

Royal Decree 723/2026 on Transparent Working Conditions: 5 Essential Takeaways for Companies in Spain

The Official State Gazette (BOE) has officially published the long-awaited Royal Decree 723/2026, transposing Directive…

A Code of Ethics Alone Does Not Protect the Company

The Requirement of “Fraudulent Evasion” under Article 31 bis of the Criminal Code Article 31…

Joint Ventures: Key insights for structuring solid strategic alliances and avoiding conflicts

Business collaborations are a fundamental driver of growth today. However, for any partnership to thrive…

The Community of Madrid strengthens the tax regime for family businesses with the approval and entry into force of Law 3/2026 on Family Business Support

The Community of Madrid has approved Law 3/2026 of June 30 on Family Business Support,…