According to the International Association of Privacy Professionals (IAPP), the Spanish data protection authority issued four fines, including three EU General Data Protection Regulation penalties, amounting to 169,000 euros. In the heaviest fine, Equifax Iberica was ordered to pay 75,000 euros for violating Article 6(1) after failing to delete a data subject's information upon request.