HISPAPOST, S.A.

€36,000

Insufficient fulfilment of data breach notification obligations

Decision Date

1 de fevereiro de 2024

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Transportation and Energy

Country

ES

Law

GDPR

Status

FINAL

Description

The Spanish DPA has imposed a fine on HISPAPOST, S.A.. The police had found over a thousand abandoned letters containing the Hispapost logo. Hispapost had been contracted by several companies to deliver the letters. During its investigation, the DPA found that Hispapost, as a processor, had failed to report the data protection incident to the data controllers in a timely manner. The original fine of EUR 60,000 was reduced to EUR 36,000 due to admission of responsibility and voluntary payment.

Legal Citations

Art. 28 (3)

Issues & Violations

Insufficient fulfilment of data breach notification obligations

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.