Spain

UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC

70,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-11-03.

Rank · Sector

#73

of 167 in Transportation and Energy

Rank · Spain

#148

of 1,075

Rank · All fines

#586

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-11-03
Controller / Processor: UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation of the principle of integrity and confidentiality.

Open original source Links to the regulator's original publication or another source.