Spain’s data protection authority (AEPD) has appointed a new director, Mar España Martí for a four year term.  Since taking office Martí has signalled that she wished to move away from the perception of the AEPD as a sanctioning body and going forwards would like to seek better engagement with the public and private stakeholders with the aim of establishing the correct balance between the right to privacy and the need for information.

A press release about the appointment is available here (Spanish).

What action could be taken to manage risks that may arise from this development?

None – for information only at this stage. However financial services companies should bear in mind for future data processing activities in Spain that the regulator may be more willing to engage data controllers and less keen to take enforcement action.