Spain

Corporación radiotelevisión espanola

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-11-19.

Rank · Sector

#151

of 366 in Media, Telecoms and Broadcasting

Rank · Spain

#170

of 1,071

Rank · All fines

#618

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-11-19
Controller / Processor: Corporación radiotelevisión espanola
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

CORPORACIÓN RADIOTELEVISIÓN ESPAÑOLA and the trade union have reported a security breach to the AEPD after six unencrypted USB sticks containing personal data were lost. The violation affected about 11,000 people, including identification data, employment data, data about criminal convictions and health data.

Open original source Links to the regulator's original publication or another source.