The Spanish Agency for Data Protection is demanding €900,000 ($1.24 million) from Google for three breaches of the laws: gathering data on users, combining the data through several services and keeping the data indefinitely without the knowledge or consent of users.
Google said in a statement that it was studying the findings to determine its next step and will continue to cooperate with the agency to "create simpler, more effective services."
Spain is one of the six countries that have been investigating Google since spring, an extension of a pan-European investigation that dates to early 2012.
The Dutch privacy watchdog has said it may fine Google for breaching data protection law in the Netherlands. It hasn't indicated how big the fine could be but has asked Google to attend a hearing on the matter.
In Italy, Google faces a possible fine of more than €1.2 million, while in the German city of Hamburg fines could total €1 million, regulators have said.
In September, France's data protection watchdog took legal action against Google that could lead to fines after concluding that the company missed a three-month deadline to comply with an order to change its treatment of user data.