LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
תאריך ההחלטה
20 בדצמבר 2024
סמכות
Spanish Data Protection Authority (aepd)
ES
סקטור
Individuals and Private Associations
מדינה
ES
חוק
GDPRסטטוס
FINALתיאור
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
ציטוטים משפטיים
Art. 35
בעיות והפרות
Insufficient technical and organisational measures to ensure information security