[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMn7yaxIwBwSaerj9xGHuvp08HlMJbDFw4HB_MJniKq8":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"f6e3119c-e518-4018-b674-a7fb16e66adc","AEPD (Spain) - PS-00480-2025","aepd-spain-ps-00480-2025-0fdd4e","Standardized name and link ← Older revision Revision as of 11:16, 24 July 2026 Line 32: Line 32: |GDPR_Article_2=Article 27 GDPR |GDPR_Article_2=Article 27 GDPR |GDPR_Article_Link_2=Article 27 GDPR |GDPR_Article_Link_2=Article 27 GDPR |GDPR_Article_3= |EU_Law_Name_1=Article 5(3) ePrivacy Directive 2002\u002F58\u002FEC |GDPR_Article_Link_3= |EU_Law_Link_1=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Fdir\u002F2002\u002F58\u002Foj |GDPR_Article_4= |GDPR_Article_Link_4= |EU_Law_Name_1=Article 5(3) ePrivacy Directive |EU_Law_Link_1=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Fdir\u002F2002\u002F58\u002Foj\u002Feng |EU_Law_Name_2= |EU_Law_Name_2= |EU_Law_Link_2= |EU_Law_Link_2=","Spain's AEPD has fined Tiger Media Inc. €72,000 for violating GDPR and the ePrivacy Directive. The adult ad network placed advertising cookies on users' devices without prior consent, unlawfully relying on legitimate interest as a legal basis. Additionally, the company, not established in the EU, failed to appoint a valid representative within the Union.","Spain's AEPD fines Tiger Media Inc. €72,000 for placing advertising cookies without consent.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=AEPD_(Spain)_-_PS-00480-2025&diff=52463&oldid=51702","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F5\u002F59\u002FLogoES.jpg","2026-07-24T11:16:06+00:00","2026-07-24T12:00:18.1669+00:00",7,[17],{"name":18,"type":19},"Tiger Media Inc.","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":20,"icon":22,"name":23,"slug":24},{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":62},"tiger-media-fined-72k-for-unlawful-advertising-cookies-and-missing-eu-representative","Tiger Media Fined €72K for Unlawful Advertising Cookies and Missing EU Representative","Tiger Media Inc. placed advertising cookies on users' devices without obtaining prior consent, incorrectly invoking 'legitimate interest' as a legal basis — a justification explicitly prohibited for non-essential tracking cookies under the ePrivacy Directive. This violation compounds GDPR Article 7 requirements, which demand freely given, specific, informed, and unambiguous consent before processing personal data via cookies. Further, as a non-EU-established company targeting EU users, Tiger Media failed to appoint a designated EU representative as required by GDPR Article 27, a structural compliance gap that impedes regulatory accountability. This case highlights that ad networks, regardless of their geographic location, face full GDPR and ePrivacy obligations when processing EU residents' data. Regulators are increasingly scrutinizing cookie consent mechanisms and the accountability structures of non-EU companies.",[53,54,55,56,57,58,59,60,61],"GDPR Article 6 – Lawfulness of processing","GDPR Article 7 – Conditions for consent","GDPR Article 27 – Representatives of controllers not established in the Union","ePrivacy Directive Article 5(3) – Cookie consent requirement","NIST SP 800-53 PT-2 (Authority to Process Personally Identifiable Information)","NIST SP 800-53 PT-4 (Consent)","CIS Control 3 – Data Protection","CIS Control 15 – Service Provider Management","ISO\u002FIEC 27701 – Privacy Information Management (PIMS)",{}]