Spanish Newspaper Fined €20,000 for Failing to Anonymize Assault Video Under GDPR
El Español newspaper published an identifiable video of an assault victim and a minor without applying basic anonymization techniques such as face-blurring or audio alteration, violating GDPR's data minimisation principle (Article 5(1)(c)). The core failure was not the act of reporting itself, but the disproportionate disclosure of personal data when less privacy-invasive alternatives were readily available. Spain's AEPD rejected arguments around newsworthiness and prior virality, affirming that freedom of information does not override data protection obligations without a case-by-case proportionality assessment. This case highlights that media organizations are data controllers subject to GDPR and must embed privacy-by-design thinking into editorial and publishing workflows.
Tactical Insight
Immediate actions
- Establish a mandatory pre-publication review checklist that flags content containing identifiable individuals, especially minors, requiring anonymization sign-off before release.
- Train editorial and video production staff to apply face-blurring and audio alteration tools as a default step when handling footage of assault victims or minors.
Policy & Governance improvements
- Develop and enforce a formal Data Minimisation Policy for media content that defines proportionality criteria for publishing identifiable personal data in journalistic contexts.
- Appoint or empower a Data Protection Officer (DPO) to review high-risk content decisions and document the legitimate basis and proportionality assessment for each case.
- Create a pre-clearance process for any user-generated or third-party video content that may involve sensitive categories of data or vulnerable individuals.
Long-term cultural improvements
- Integrate GDPR awareness and data minimisation principles into recurring staff training for journalists, editors, and social media managers.
- Implement a lessons-learned review process after any regulatory inquiry or complaint to update editorial guidelines and prevent repeat violations.