Spain: Data Protection Agency investigation into Yoti over alleged infringements of data protection regulations (EXP202317887)
Progress
Current status
in force
10 Mar 2026 in force
12 Dec 2023 under deliberation
Scope
Implementers
Spain
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Spanish Data Protection Agency imposed a total fine of EUR 950'000 on Yoti for violating General Data Protection Regulation
On 10 March 2026, the Spanish Data Protection Agency (AEPD) fined Yoti EUR 950’000 following an investigation into its role as an intermediary in identity and age-verification processes. The fine includes EUR 500’000 for processing special category …
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Spanish Data Protection Agency opened an investigation into Yoti over alleged infringements of data protection regulations
On 12 December 2023, the Spanish Data Protection Agency (AEPD) opened an inquiry into Yoti regarding its role as an intermediary in identity and age-verification processes. The review focuses on the security and privacy framework of Yoti’s system, i…
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority