{"id":19585,"date":"2025-11-15T01:40:00","date_gmt":"2025-11-15T00:40:00","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=19585"},"modified":"2025-11-05T13:55:00","modified_gmt":"2025-11-05T12:55:00","slug":"andorran-data-protection-agency","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/andorran-data-protection-agency\/","title":{"rendered":"Changes at the Andorran Data Protection Agency and review of its activity"},"content":{"rendered":"\n

The Andorran Data Protection Agenc<\/strong>y (APDA) has entered a new phase with a change in its leadership<\/strong><\/a> and with increasingly visible activity in inspecting and monitoring compliance with data protection regulations in the Principality. In recent months, the Agency has published several resolutions and reports that demonstrate growing oversight, both in the public and private sectors.<\/p>\n\n\n\n

Below, we review some of the most relevant cases:<\/p>\n\n\n\n

Improper transfer of data between two psychology centers<\/strong>
The APDA sanctioned a psychology center for sharing patient data with another center without complying with legal consent and information requirements. The resolution highlighted the need to ensure confidentiality in the health sector, especially when dealing with sensitive data such as psychological well-being information.<\/p>\n\n\n\n

A digital media outlet without a Privacy Policy<\/strong>
An online media outlet was sanctioned for not having an accessible and adequate Privacy Policy on its website. The Agency reminded that any entity collecting personal data \u2014such as emails or browsing information\u2014 must clearly inform users about how their data is used and about their rights.<\/p>\n\n\n\n

Inadequate identification in eSIM management<\/strong>
A telecommunications company was warned for failing to implement sufficient measures to verify the identity of eSIM holders. The APDA considered that this deficiency could facilitate unauthorized access to services or identity theft, recommending the adoption of more secure protocols for client verification.<\/p>\n\n\n\n

Privacy policies in political parties<\/strong>
According to an official action by the Agency, only one Andorran political party had a complete and compliant Privacy Policy before APDA’s intervention. The Agency urged other parties to adapt their practices, especially regarding the processing of data of supporters and members.<\/p>\n\n\n\n

Government\u2019s failure to comply with the transparency principle<\/strong>
The Government of Andorra was subject to a resolution for failing to respect the transparency principle in one of its administrative actions. The APDA reminded that public administrations are also required to ensure that citizens are clearly informed about the processing of their personal data.<\/p>\n\n\n\n

Excessive data collection by a real estate agency<\/strong>
A real estate agency was warned<\/strong><\/a> for requesting excessive personal information \u2014such as financial or employment data\u2014 even before allowing visits to a rental property. The Agency considered that this practice violated the data minimization principle, which requires collecting only the data strictly necessary for the specific purpose.<\/p>\n\n\n\n

A balance without financial penalties, but with clear warnings<\/strong>
Although, so far, the APDA\u2019s resolutions have resulted in warnings rather than financial penalties, their activity demonstrates a clear commitment to advancing a culture of data protection in the country. The Agency continues to work on strengthening regulatory compliance and raising awareness among both companies and institutions about the importance of respecting individuals\u2019 privacy.<\/p>\n\n\n\n

Author: Victor Rosell\u00f3<\/strong>, Lawyer.<\/p>\n\n\n\n

If you need help writing Data Protection regulations in Andorra, contact us!<\/p>\n\n\n\n

\n
\n

<\/p>

    <\/ul><\/div>\n
    \n
    \n<\/fieldset>\n