Spain

EVERIS SPAIN S.L

64,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-10-09.

Rank · Sector

#113

of 322 in Finance, Insurance and Consulting

Rank · Spain

#169

of 1,075

Rank · All fines

#619

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-10-09
Controller / Processor: EVERIS SPAIN S.L
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine on EVERIS SPAIN S.L.. Everis had published information on sold data of users of an insurance company as well as records with personal data of Spanish customers of the insurance company. The DPA considered this a violation of the confidentiality of the data. The DPA also found that the unlawful publication of the data had been possible due to, among other things, a lack of technical and organizational measures to protect personal data at the time of the data breach. The original fine of EUR 80,000 was reduced to EUR 64,000 due to voluntary payment.

Open original source Links to the regulator's original publication or another source.