Spain

Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM

3,600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-12-02.

Rank · Sector

#94

of 351 in Individuals and Private Associations

Rank · Spain

#584

of 1,075

Rank · All fines

#1,962

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-12-02
Controller / Processor: Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM
Sector: Individuals and Private Associations
Quoted Articles: Art. 9 (2) a) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has fined the Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM. The controller processed medical data from Covid-19 antigen tests of participants in sports competitions without their consent to the processing. In addition, the DPA found that the controller failed to inform the data subjects of the data retention period. The original fine of EUR 6,000 was reduced to EUR 3,600 due to voluntary payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.