HISPAPOST, S.A.
€36,000
Insufficient fulfilment of data breach notification obligations
Karar Tarihi
1 Şubat 2024
Otorite
Spanish Data Protection Authority (aepd)
ES
Sektör
Transportation and Energy
Ülke
ES
Hukuk
GDPRDurum
FINALAçıklama
The Spanish DPA has imposed a fine on HISPAPOST, S.A.. The police had found over a thousand abandoned letters containing the Hispapost logo. Hispapost had been contracted by several companies to deliver the letters. During its investigation, the DPA found that Hispapost, as a processor, had failed to report the data protection incident to the data controllers in a timely manner. The original fine of EUR 60,000 was reduced to EUR 36,000 due to admission of responsibility and voluntary payment.
Yasal Atıflar
Art. 28 (3)
Sorunlar & İhlaller
Insufficient fulfilment of data breach notification obligations