Welcome to the ANRO Privacy AEPD Resolutions Tracker. In an era defined by the principle of "proactive responsibility," staying informed of the Spanish Data Protection Agency’s latest rulings is no longer just a legal necessity—it is a strategic business advantage.
Below you will find a summary of the most significant resolutions for February 2026.
The Summary: Provides an immediate overview of the infraction and the penalty.
Deep Dive: For a full exegesis—including the specific articles of the LOPDGDD/GDPR infringed and Actionable Steps to protect your company—simply click on the blue reference numbers to expand the full legal report.
he AEPD fined a private Catholic school in Madrid €20,000 (reduced to €12,000 after voluntary payment and acknowledgement of responsibility) for using Google Workspace for Education's free "Fundamentals" version without a valid legal basis for the full scope of data processing, without transparently informing parents about the platform's extensive data collection and international transfers, and without conducting an adequate Data Protection Impact Assessment, establishing that a legal obligation to provide digital education does not legitimise all processing performed by a commercial technology platform.