AEPD (Spain) - PS-00008-2025
Spain's AEPD fines RAMONA FILMS €60,000 for failing to comply with a corrective order.
Spain's data protection authority (AEPD) has fined RAMONA FILMS, S.L. €60,000 for failing to comply with a corrective order. The company was previously fined for GDPR infringements, including lacking a data processing agreement with a payment provider. The DPA ordered RAMONA FILMS to formalize and report its relationship with the processor, but the company failed to provide the required agreement, instead submitting an unsigned and undated document, and was found to have continued its relationship with the processor.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AEPD?
Get an email when a new story names AEPD, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonRAMONA FILMS was fined €60,000 not for the original GDPR violation, but for failing to comply with a regulatory corrective order — a critical distinction that shows how non-compliance compounds penalties. The core failure was the absence of a valid Data Processing Agreement (DPA) with a payment provider, a mandatory requirement under GDPR Article 28. Submitting an unsigned, undated document demonstrates a lack of internal governance and legal oversight around third-party data processor relationships. This case underscores that regulators actively monitor remediation efforts, and half-measures or procedural shortcuts can result in sanctions far exceeding the original fine.