JAÉN SENTIDO Y COMÚN
€2,000
Insufficient technical and organisational measures to ensure information security
Decision Date
4 de agosto de 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Not assigned
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 2,000 on JAÉN SENTIDO Y COMÚN. The controller had sent an e-mail to 241 people in an open distribution list, making the email addresses of all recipients visible to the other recipients.
Legal Citations
Art. 5 (1)Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security