Privacy and media law: Spain
As of 2026-10-05.
Medical confidentiality
Anyone who creates or sees clinical records must keep them confidential (Ley 41/2002, Arts. 2.7 and 7) [1]. A professional who reveals a patient's secrets commits a crime: one to four years in prison, a fine and a two-to-six-year professional ban (Criminal Code Art. 199.2) [2][3].
Health data
The GDPR allows health data to be processed only under narrow exceptions, with fines up to EUR 20 million or 4% of worldwide turnover [4]. Ley Orgánica 3/2018 adds a confidentiality duty for everyone handling it [5]. Patients can complain to the regulator, the AEPD [6].
Photographs
The Constitution protects privacy and one's own image (Art. 18.1) [7]. Photographing or publishing a person without consent is unlawful unless an exception applies; the main one covers public officials and public-facing professionals at public events or in places open to the public (Ley Orgánica 1/1982, Arts. 7.5 and 8.2.a) [8]. Clinic grounds are neither. Private persons get stronger protection than public figures [9].
Stopping publication
Prior censorship is banned, and only a judge can seize a publication (Art. 20.2 and 20.5) [7]. Courts can order an intrusion stopped, act against imminent ones and award damages, presumed once intrusion is proven (Ley Orgánica 1/1982, Art. 9) [8]. Inaccurate facts can be corrected by sending a rectification to the editor within seven days (Ley Orgánica 2/1984) [10]. Courts weigh truthfulness, public relevance and whether private details were necessary [9].
What this means in practice
Paparazzi photos from Ibiza sell to magazines for thousands of euros [11]. The law punishes leaks and intrusions mostly after the fact; it does not keep photographers away. A clinic's setup, such as one client per residence and a private arrival, matters as much as the statute.
Sources
- Ley 41/2002, de 14 de noviembre, básica reguladora de la autonomía del paciente (consolidated text), Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-2002-22188, accessed 2026-10-05.
- Ley Orgánica 10/1995, de 23 de noviembre, del Código Penal (consolidated text), Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-1995-25444, accessed 2026-10-05.
- "El derecho de defensa, la intimidad del contrario y la responsabilidad penal del abogado" (quotes Art. 199.2 CP in full), Consejo General de la Abogacía Española, blog (secondary source, bar association), https://www.abogacia.es/publicaciones/blogs/blog-de-innovacion-legal/el-derecho-de-defensa-la-intimidad-del-contrario-y-la-responsabilidad-penal-del-abogado/, accessed 2026-10-05.
- Regulation (EU) 2016/679 (General Data Protection Regulation), Arts. 9 and 83, EUR-Lex, https://eur-lex.europa.eu/eli/reg/2016/679/oj, accessed 2026-10-05.
- Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales, Art. 5, Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673, accessed 2026-10-05.
- "Ejerce tus derechos", Agencia Española de Protección de Datos (AEPD), https://www.aepd.es/derechos-y-deberes/conoce-tus-derechos, accessed 2026-10-05.
- Constitución Española de 1978, Arts. 18 and 20, Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-1978-31229, accessed 2026-10-05.
- Ley Orgánica 1/1982, de 5 de mayo, de protección civil del derecho al honor, a la intimidad personal y familiar y a la propia imagen, Arts. 7, 8 and 9, Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-1982-11196, accessed 2026-10-05.
- Tribunal Constitucional, Sentencia 58/2018, de 4 de junio (FJ 7), https://hj.tribunalconstitucional.es/es/Resolucion/Show/25683, accessed 2026-10-05.
- Ley Orgánica 2/1984, de 26 de marzo, reguladora del derecho de rectificación, Arts. 1 to 4, Boletín Oficial del Estado, https://www.boe.es/buscar/act.php?id=BOE-A-1984-7248, accessed 2026-10-05.
- Montse Monsalve, "La Dolce Vita", Periódico de Ibiza y Formentera, 26 July 2015 (newspaper, context only, not a legal source), https://www.periodicodeibiza.es/pitiusas/ibiza/2015/07/26/157745/dolce-vita.html, accessed 2026-10-05.