The Court of Justice of the European Union (CJEU) has issued a judgement in Case C-658/19 Commission v Spain, stating that Spain failed to adopt measures to transpose EU Directive 2016/680 on the protection of personal data for the purposes of the prevention and detection of criminal offences into national legislation within required period of time and failed to the European Commission about these measures. Due to seriousness and duration of the infringement, Spain was ordered to pay a lump sum of approximately