LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
Päätöspäivä
20. joulukuuta 2024
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Individuals and Private Associations
Maa
ES
Laki
GDPRTila
FINALKuvaus
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
Oikeudelliset viittaukset
Art. 35
Asiat ja rikkomukset
Insufficient technical and organisational measures to ensure information security