The Data Protection Act 15/1999 as well as the Royal Decree 1720/2007 , of 21 december, which approves the regulation implementing the Act, requires all communities which handle personal information to comply with a number of important principles regarding privacy and disclosure.
The Act states that anyone who processes personal information must comply with every procedure established in order