Barcelona Airport Security Guard Association ('AVSAB')
€3,000
Non-compliance with general data processing principles
Decision Date
September 7, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Employment
Country
ES
Law
GDPRStatus
FINALDescription
A member of the AVSAB security committee used WhatsApp to send messages to private phone numbers containing personal information about employees. This was a violation of the confidentiality principle that, according to the AEPD, must be respected not only by the data controller, but also by any other subject involved in any phase of the processing.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles