Enforcement Intelligence
GDPR Enforcement Risk in Spain Hospitality
Real enforcement patterns. Operational governance signals. Practical remediation paths.
Analyse your AI governance risk
Enterprise-grade AI governance without the enterprise team. Português, Français, Deutsch, Español, and English. 89 Articles, 4 Continents, within your budget and expertise level. Runtime AI Governance. For a demo: hello@obexgate.com
Enforcement Summary
Top Violations
Structured violation patterns are shown only when supplied in the enforcement dataset.
Non-compliance with general data processing principles
- Count
- 36
Insufficient fulfilment of information obligations
- Count
- 6
Insufficient legal basis for data processing
- Count
- 5
Insufficient data processing agreement
- Count
- 1
Insufficient technical and organisational security measures
- Count
- 1
Common Patterns
Operational patterns that repeat across enforcement records.
- Non-compliance with general data processing principles
- Insufficient fulfilment of information obligations
- Insufficient legal basis for data processing
- Insufficient data processing agreement
- Insufficient technical and organisational security measures
Real Examples
Examples are shown only when source-backed records are supplied.
Travel services company
- Regulator
- Spanish Data Protection Authority (aepd)
- Date
- 2025-08-14
- Fine amount
- EUR 42K
- Source
- Source
- Governance lesson
- Non-compliance with general data processing principles
Hotel group
- Regulator
- Spanish Data Protection Authority (aepd)
- Date
- 2025-12-20
- Fine amount
- EUR 32K
- Source
- Source
- Governance lesson
- Insufficient technical and organisational security measures
Cruise line operator
- Regulator
- Spanish Data Protection Authority (aepd)
- Date
- 2023-07-07
- Fine amount
- EUR 15K
- Source
- Source
- Governance lesson
- Non-compliance with general data processing principles
Enforcement Pattern › Governance Control › Runtime Evidence
OBEXGATE Remediation Positioning
OBEXGATE turns enforcement patterns into operational controls and runtime evidence.
Enforcement Pattern
Governance Control
Runtime Evidence
- Policy to control mapping
- Evidence trail capture
- Processor and third-party review
- Governance diagnostics
- Remediation report
Source and Update Positioning
Language alternates
Related OBEXGATE links
Information contained is not medical advice, legal advice, or a guarantee of success. Regulatory requirements change and should be verified against current published guidance, legislation, and regulator materials.