AEPD (Spain) - ps-00256-2025
Spain's AEPD fines a notary €2,000 for GDPR violation.
Spain's AEPD has fined a notary €2,000 for violating GDPR by disclosing protected cadastral data, including a data subject's name and address, to a client without a valid legal basis. The data subject filed a complaint after receiving a letter from a third party, accompanied by a cadastral certificate obtained by the notary for a client interested in a property transaction.
AI summary of the linked source. Not reviewed by an editor. How this works
Run cadastral certificate?
Get an email when a new story names cadastral certificate, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA Spanish notary disclosed a data subject's personal cadastral data — including name and address — to a third-party client without establishing a valid legal basis under GDPR, resulting in a €2,000 fine from Spain's AEPD. The core failure was treating access to professional data tools as implicit authorisation to share that data with clients, conflating technical ability with legal permission. This case highlights that professionals handling personal data on behalf of clients must independently verify lawful grounds for each disclosure. Even seemingly routine property transaction activities can constitute serious GDPR violations when proper data-sharing controls are absent.