Electrotecnica Bastida S.L.
€3,000
Insufficient technical and organisational measures to ensure information security
Ημερομηνία απόφασης
5 Απριλίου 2021
Αρχή
Spanish Data Protection Authority (aepd)
ES
Τομέας
Industry and Commerce
Χώρα
ES
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Spanish DPA (AEPD) has fined Electrotecnica Bastida S.L. EUR 3,000. Police officers had found 29 envelopes addressed to the controllers' respective employees on a vacant lot in the local industrial area. Two envelopes had already been opened. The envelopes contained results of medical examinations. The AEPD considered this to be a breach of the controller's duty to implement adequate technical and organizational measures to protect the processing of personal data.
Νομικές παραπομπές
Art. 32 (1)
Θέματα & Παραβάσεις
Insufficient technical and organisational measures to ensure information security