Skip to content
BOE-A-2026-6543 ·20 March 2026 ·Resolution Low impact
Tax

Companies sanctioned by the AEPD: publication of fines exceeding one million euros

The Spanish Data Protection Agency (AEPD) has published the list of sanctions imposed on legal entities that exceed one million euros (Art. 76.4 LOPDGDD). The resolution details the offenders, the nature of the infringement, and the amount of the fine. This publication includes sanctions against IDCQ HOSPITALES Y SANIDAD, SLU, AENA, S.M.E., SA., and HYUNDAI MOTOR ESPAÑA, SLU.

In 2 key points

  1. Mandatory publication of sanctions exceeding one million euros for legal entities, Art. 76.4 LOPDGDD (art. 76.4 LOPDGDD)
  2. Maximum sanction recorded in this resolution of 10,043,002 euros for AENA, S.M.E., SA., annex (anexo)

How it affects those involved

For legal entities, this resolution results in the public exposure of serious and very serious infringements regarding data protection (GDPR and LOPDGDD), leading to significant reputational risk. The sanctioned companies must face amounts reaching 10,043,002 euros in the case of AENA (annex).

Lifecycle

2026-03-20PublishedPublished in the BOE
Official text Based on BOE data (boe.es). Information, not advice.

Does this provision affect you?

The tax team reviews your specific situation.

Talk to the tax team
This analysis is informational only and does not constitute legal advice or create a client-adviser relationship. BM Consulting.
Email
Contact