Overview
- Spain’s data protection agency imposed a €2,000 penalty, reduced to €1,200 after voluntary payment and admission, for disseminating an AI‑manipulated nude image.
- The publicly released resolution is heavily redacted and appears connected to the 2023 Almendralejo incidents, with the sanctioned person’s identity and age not disclosed.
- This administrative sanction proceeds on a GDPR track separate from earlier criminal outcomes that assigned about 15 minors one year of supervised release and educational measures.
- The AEPD opened proceedings on September 20, 2023 after press reports and admitted a victim’s complaint on October 5 following its October 2 filing.
- Some families report receiving no formal notice and oppose revisiting the case, while reporters say additional AEPD rulings could follow given multiple victims, with a 2024 Berlin order on an Olaf Scholz deepfake cited as a related European reference.