JAÉN SENTIDO Y COMÚN
€2,000
Insufficient technical and organisational measures to ensure information security
Decision Date
August 4, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Not assigned
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 2,000 on JAÉN SENTIDO Y COMÚN. The controller had sent an e-mail to 241 people in an open distribution list, making the email addresses of all recipients visible to the other recipients.
Legal Citations
Art. 5 (1)Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security