ALBERO FORTE COMPOSITE, S.L.
€12,000
Insufficient technical and organisational measures to ensure information security
Decision Date
28 de abril de 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Employment
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.
Legal Citations
Art. 35
Issues & Violations
Insufficient technical and organisational measures to ensure information security