LIGA NACIONAL DE FÚTBOL PROFESIONAL
€1,000,000
Insufficient technical and organisational measures to ensure information security
決定日期
2024年12月20日
權限
Spanish Data Protection Authority (aepd)
ES
部門
Individuals and Private Associations
國家
ES
法律
GDPR狀態
FINAL說明
The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.
法律引文
Art. 35
問題與違規
Insufficient technical and organisational measures to ensure information security