Transport Workers' Union of Aragon
€3,000
Non-compliance with general data processing principles
Fecha de la decisión
3 de enero de 2023
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.
Citas legales
Art. 5 (1)Art. 32
Problemas e infracciones
Non-compliance with general data processing principles