Spain

General Confederation of Labour ('CGT')

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-11-13.

Rank · Sector

#349

of 597 in Industry and Commerce

Rank · Spain

#592

of 1,075

Rank · All fines

#1,994

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-11-13
Controller / Processor: General Confederation of Labour ('CGT')
Sector: Industry and Commerce
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The CGT, with the aim of convening a meeting, e-mailed personal data of the complainant, including her home address, family relationship, pregnancy status and the date of an ongoing verbal abuse and harassment case, to 400 union members without her consent.

Open original source Links to the regulator's original publication or another source.