miDGT App Data Sharing Scandal: Privacy Alert for Users 2026

The miDGT app data sharing scandal has exposed how a government app collected and sent user data to third-party servers without users' knowledge. The Spanish Data Protection Agency (AEPD) recently reprimanded the Directorate-General for Traffic (DGT) after a citizen's complaint revealed years of unauthorized data collection and sharing. This incident raises serious questions about privacy in official apps and the importance of transparency.

What Happened: A User's Discovery

On November 17, 2023, a user filed a complaint with the AEPD, accusing miDGT of sending device data "in a strange and unnecessary way." The user noticed something odd when installing the app: an unexpected alert from DuckDuckGo's App Tracking Protection feature. This tool warned that miDGT was requesting information not needed for its operation and sending it to third-party servers.

Thanks to DuckDuckGo, the user could see the full scope of data being collected. The AEPD's report details a long list of data points, many of which are irrelevant to a traffic app. Even more concerning, the DGT itself was unaware of this behavior.

The Data Collected and Shared

According to the AEPD report, miDGT collected a wide range of device information. While the exact list is extensive, it includes data that is unnecessary for the app's core functions. The real issue is that this data was shared with other companies through Google's services, and could be processed outside the European Union.

This sharing likely occurred via third-party SDKs integrated into the app, which transmitted data to advertising or analytics platforms. The DGT's lack of awareness highlights a common problem: organizations often don't fully understand what third-party code does.

Why This Matters for Users

This scandal affects millions of miDGT users who trusted the app to handle their data responsibly. Unnecessary data collection and sharing can lead to privacy risks, including profiling and targeted advertising. It also violates data protection regulations like the GDPR, which require explicit consent and transparency.

The AEPD's reprimand serves as a warning to all public and private entities: you are responsible for the behavior of third-party components in your apps. Users deserve to know what data is collected and why.

Key Takeaways

• Unauthorized data sharing: miDGT sent device data to third-party servers without user consent.
• Citizen-led discovery: A user's use of DuckDuckGo's App Tracking Protection exposed the issue.
• DGT unaware: The DGT itself did not know about the data transmission.
• Regulatory action: The AEPD reprimanded the DGT, emphasizing accountability.
• Privacy risk: Data could be processed outside the EU, raising GDPR concerns.

How to Protect Your Privacy

As a user, you can take steps to safeguard your data. Use privacy-focused tools like DuckDuckGo's App Tracking Protection to monitor app behavior. Review app permissions and disable unnecessary access. Stay informed about updates and privacy policies, and report suspicious activity to authorities. The longer history behind the story is traced in miDGT App Data Sharing Scandal: Privacy Alert for Users.

For app developers, this case underscores the need for regular audits of third-party SDKs and clear privacy policies. Transparency builds trust and ensures compliance. The background to this story is set out in Amazon Ring Neighbours App UK Launch Raises Privacy Concerns. A related thread runs through Florida Sues Netflix Over Minors' Data Collection and Privacy. Earlier coverage in RentTech Data Demands Clash with Victorian Tenant Privacy Laws shows how the argument developed.

Comparison of App Data Practices

What to Watch Next

The DGT is expected to review its app's data practices and may face further regulatory scrutiny. Users should watch for updates to miDGT and changes in its privacy policy. The case may also prompt other regulators to investigate similar apps. A closer look at the same subject appears in Declutter Your Digital Life: Protect Data From AI and Boost Privacy. Anyone following the wider picture can start with App Tax Exposed: Apple and Google's 30% Mobile Monopoly. The same theme surfaces in Amazon Ring Neighbours App: A Curtain-Twitching Disaster, which takes a different angle.

Ultimately, this incident is a reminder that digital privacy is a shared responsibility. Stay vigilant and demand transparency from the apps you use. Context on how this played out before sits in Stormont Dysfunction: How Power-Sharing Stifles Non-Sectarian Parties. A companion piece, First AI Agent Cyberattack in Spain: AEPD Confirms Breach, approaches the same subject from another angle.