Spain’s data protection authority, the Agencia Española de Protección de Datos, published a list of public administrations "sanctioned" for failing to uphold citizens' rights to data protection. Some public administrations did not comply with AEPD information requirements and others did "not adapt the data processing to the law and (did) not accredit the corrective measures imposed." Other administrations did not appoint a data protection delegate despite being a locality of more than 20,000 citizens.