LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
Дата принятия решения
20 декабря 2024 г.
Авторитет
Spanish Data Protection Authority (aepd)
ES
Сектор
Individuals and Private Associations
Страна
ES
Закон
GDPRСтатус
FINALОписание
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
Юридические цитаты
Art. 35
Проблемы и нарушения
Insufficient technical and organisational measures to ensure information security