LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
20 dicembre 2024
Autorità
Spanish Data Protection Authority (aepd)
ES
Settore
Individuals and Private Associations
Paese
ES
Legge
GDPRStato
FINALDescrizione
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
Citazioni legali
Art. 35
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security