[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCMLdUyW8BQ71DDjfGCFSPhw2GlggaAhYkSsxQRuEd5A":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":49},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"6eb3279b-4519-4288-abd0-22bfb76440d5","AEPD (Spain) - PS-00008-2025","aepd-spain-ps-00008-2025-51e5ae","Created page with \"{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color= |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=PS-00008-2025 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https:\u002F\u002Fwww.aepd.es\u002Fdocumento\u002Fps-00008-2025.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigat...\" Show changes","Spain's data protection authority (AEPD) has fined RAMONA FILMS, S.L. €60,000 for failing to comply with a corrective order. The company was previously fined for GDPR infringements, including lacking a data processing agreement with a payment provider. The DPA ordered RAMONA FILMS to formalize and report its relationship with the processor, but the company failed to provide the required agreement, instead submitting an unsigned and undated document, and was found to have continued its relationship with the processor.","Spain's AEPD fines RAMONA FILMS €60,000 for failing to comply with a corrective order.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=AEPD_(Spain)_-_PS-00008-2025&diff=52748&oldid=0","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F5\u002F59\u002FLogoES.jpg","2026-08-21T12:20:06+00:00","2026-08-21T14:00:15.462815+00:00",7,[17,20],{"name":18,"type":19},"AEPD","vendor",{"name":21,"type":22},"RAMONA FILMS, S.L.","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18,21],{"controls":47,"vendors":48},[],[],{"slug":50,"title":51,"body":52,"framework_refs":53,"framework_notes":63},"60000-fine-for-ignoring-gdpr-corrective-order-on-processor-agreement","€60,000 Fine for Ignoring GDPR Corrective Order on Processor Agreement","RAMONA FILMS was fined €60,000 not for the original GDPR violation, but for failing to comply with a regulatory corrective order — a critical distinction that shows how non-compliance compounds penalties. The core failure was the absence of a valid Data Processing Agreement (DPA) with a payment provider, a mandatory requirement under GDPR Article 28. Submitting an unsigned, undated document demonstrates a lack of internal governance and legal oversight around third-party data processor relationships. This case underscores that regulators actively monitor remediation efforts, and half-measures or procedural shortcuts can result in sanctions far exceeding the original fine.",[54,55,56,57,58,59,60,61,62],"GDPR Article 28 (Processor obligations and Data Processing Agreements)","GDPR Article 83(4) (Administrative fines for Article 28 infringements)","GDPR Article 58(2)(d) (Supervisory authority corrective powers)","NIST SP 800-53 SA-9 (External Information System Services)","NIST SP 800-53 PM-5 (System Inventory)","CIS Control 15 (Service Provider Management)","ISO\u002FIEC 27001:2022 Annex A 5.19 (Information security in supplier relationships)","ISO\u002FIEC 27001:2022 Annex A 5.20 (Addressing security within supplier agreements)","ITIL Service Design — Supplier Management Process",{}]