LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
Ημερομηνία απόφασης
20 Δεκεμβρίου 2024
Αρχή
Spanish Data Protection Authority (aepd)
ES
Τομέας
Individuals and Private Associations
Χώρα
ES
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
Νομικές παραπομπές
Art. 35
Θέματα & Παραβάσεις
Insufficient technical and organisational measures to ensure information security