BAYARD REVISTAS, S.A.
€31,200
Insufficient technical and organisational measures to ensure information security
Sprendimo priėmimo data
2022 m. rugsėjo 28 d.
Institucija
Spanish Data Protection Authority (aepd)
ES
Sektorius
Media, Telecoms and Broadcasting
Šalis
ES
Teisė
GDPRStatusas
FINALAprašymas
The Spanish DPA has imposed a fine on Bayard Revistas S.A.. Unauthorized persons had accessed the Bayard database and thus unauthorizedly siphoned off location and contact data of users of the database. Approximately 470,000 users were affected by the incident. The DPA's investigation determined that a vulnerability in the controller's systems allowed the incident to occur. The original fine of EUR 52,000 was reduced to EUR 31,200 due to voluntary payment and admission of guilt.
Teisinės citatos
Art. 5 (1)Art. 32Art. 33
Problemos ir pažeidimai
Insufficient technical and organisational measures to ensure information security