Spain

JAÉN SENTIDO Y COMÚN

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-08-04.

Rank · Sector

#140

of 218 in Not assigned

Rank · Spain

#703

of 1,075

Rank · All fines

#2,311

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-08-04
Controller / Processor: JAÉN SENTIDO Y COMÚN
Sector: Not assigned
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA has imposed a fine of EUR 2,000 on JAÉN SENTIDO Y COMÚN. The controller had sent an e-mail to 241 people in an open distribution list, making the email addresses of all recipients visible to the other recipients.

Open original source Links to the regulator's original publication or another source.