UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC
€70,000
Non-compliance with general data processing principles
Datum för beslut
3 november 2022
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Transportation and Energy
Land
ES
Lag
GDPRStatus
FINALBeskrivning
The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation of the principle of integrity and confidentiality.
Rättsliga hänvisningar
Art. 5 (1)Art. 32
Frågor och överträdelser
Non-compliance with general data processing principles