Losada Advocats S.L.
€10,000
Insufficient technical and organisational measures to ensure information security
Decision Date
2 de dezembro de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA (AEPD) imposed a fine on Losada Advocats S.L. for sending an e-mail to dozens of recipients without putting them on the Blind Carbon Copy (BCC) list, thus violating Art. 32 GDPR and Art. 5 (1) f) GDPR.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security