Authority
AEPD
Country
Spain
Date Issued
February 28, 2023
Industry
Retail
Summary
Inditex was sanctioned for collecting personal data in retail stores without obtaining explicit consent and inadequate privacy transparency.
Violation Types
Data CollectionConsent
Articles Violated
Art. 6 GDPRArt. 13 GDPR
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert