Changeflow GovPing Data Protection AEPD Resolution on Rights Procedure and Labor D...
Priority review Enforcement Added Final

AEPD Resolution on Rights Procedure and Labor Dispute

AEPD Resolutions (Spain DPA)
Filed June 2nd, 2025
Detected February 24th, 2026
Email Set alert

Summary

The Spanish Data Protection Agency (AEPD) has issued a resolution regarding a data rights procedure initiated on June 2, 2025. The case involves a former employee's claims against FENG SHENG SUSHI, S.L. concerning alleged falsification of a labor contract, denial of access to personal data, and improper use of banking information.

What changed

The Spanish Data Protection Agency (AEPD) has issued a resolution (EXP202512375 / PD/00337/2025) concerning a data rights procedure filed on June 2, 2025. The claimant alleges that FENG SHENG SUSHI, S.L. violated their data protection rights by presenting a falsified labor contract dated February 23, 2024, failing to provide a copy of the contract upon request, and improperly using their banking data for a settlement transfer without prior agreement. The claimant also asserts denial of access to personal data from a video surveillance system used in accusations preceding their dismissal.

This resolution signifies an active investigation into potential violations of data protection laws, specifically the right of access and lawful processing of personal data. Regulated entities, particularly employers, should ensure robust procedures for handling data access requests, maintaining accurate employment records, and obtaining explicit consent for data processing activities. Failure to comply with data protection regulations can lead to investigations, corrective measures, and potential sanctions by the AEPD.

What to do next

  1. Review procedures for handling data access requests.
  2. Ensure all employment contracts and data processing activities are legally compliant and properly documented.
  3. Verify the lawful basis for all personal data processing, especially concerning financial and sensitive information.

Source document

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Various DPAs (CNIL, BfDI, AEPD, etc.)
Filed
June 2nd, 2025
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Employers Employees
Geographic scope
Spain

Taxonomy

Primary area
Data Protection
Operational domain
Legal
Topics
Labor Law Individual Rights

Get Data Protection alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.