The Agencia Española de Protección de Datos (AEPD), the Spanish Data Protection Authority fined a data broker for processing without a legal basis and without informing the data subjects (self-employed people) of the processing (decision in Spanish).
More information in the article on GDPR Hub.


