In Spain, the data of millions of freelance workers is shared unlawfully by the registrar of freelance workers and the tax authorities with other public authorities, who then repurpose the data. Freelancers have noticed that this data has become accessible through search engines and private companies are selling individual profiles for up to EUR 40. The freelancers themselves are not informed if or how their data is transferred and used.
Xnet completed research in 2021 on the ways in which Spanish data protection legislation fails to properly respect European data protection standards on this issue. They confirmed their hypothesis that the data of millions of freelance workers is being shared illegally and mapped out a litigation strategy. They also made the finding that “blue collar” freelance workers (drivers, delivery people, etc) suffer from violations much more than “white collar” freelance workers (consultants, etc.).
In December 2022, Xnet filed a complaint to the Spanish Data Protection Agency.
Misuse of freelance workers’ data in Spain
Organisation Name
Xnet
Country/Jurisdiction
Spain
Thematic Area
Pre-litigation: EUR 19,815
Litigation Track: EUR 17,923
Current Status
Research complete;
Case won
Grant type 1
Pre-litigation Research Support
Grant type 2
Litigation Track Support
Description
In Spain, the data of millions of freelance workers is shared unlawfully by the registrar of freelance workers and the tax authorities with other public authorities, who then repurpose the data. Freelancers have noticed that this data has become accessible through search engines and private companies are selling individual profiles for up to EUR 40. The freelancers themselves are not informed if or how their data is transferred and used.
Xnet completed research in 2021 on the ways in which Spanish data protection legislation fails to properly respect European data protection standards on this issue. They confirmed their hypothesis that the data of millions of freelance workers is being shared illegally and mapped out a litigation strategy. They also made the finding that “blue collar” freelance workers (drivers, delivery people, etc) suffer from violations more often than “white collar” freelance workers (consultants, etc.).
In December 2022, Xnet filed a complaint to the Spanish Data Protection Agency (the AEPD), who in April 2023 launched an investigation.
On 20 May 2025, the AEPD issued a statement confirming that they agreed with Xnet’s complaint. The AEPD’s decision ordered the Spanish Chamber of Commerce to delete the data of freelancer workers and forbids them from selling the data to private consulting firms without their consent. They also issued fines amounting to more than EUR one million.
"The data of millions of freelance workers is shared unlawfully by the registrar of freelance workers and the tax authorities with other public authorities, who then repurpose the data"
Strategic Goal
Xnet are seeking a ruling from the Spanish Data Protection Agency that ensures freelancer data rights are respected like the data rights of other workers. Their data should not be sold and their address data should be anonymised when they do not have a business address.
Media and related links
Organisation Name
Women’s Link Worldwide
Image credit: Photo by cottonbro studio from Pexels